Juniper SRX320, Hardware Manual

Page: 96 / 154

[edit]
admin#
set system host-name host-name
10.
Configure the traffic interface.
[edit]
admin#
set interfaces ge-0/0/1 unit 0 family inet address address/prefix-length
11.
Configure the default route.
[edit]
admin#
set routing-options static route 0.0.0.0/0 next-hop gateway
12.
Configure basic security zones and bind them to traffic interfaces.
[edit]
admin#
set security zones security-zone untrust interfaces ge-0/0/0
admin# set security zones security-zone trust interfaces ge-0/0/1
admin# set security zones security-zone trust interfaces ge-0/0/1.0
host-inbound-traffic system-services all
admin# set security zones security-zone trust interfaces ge-0/0/1.0
host-inbound-traffic protocols all
13.
Configure basic security policies.
[edit]
admin#
set security policies from-zone trust to-zone untrust policy policy-name match
source-address any destination-address any application any
admin# set security policies from-zone trust to-zone untrust policy policy-name then
permit
14.
Create a Network Address Translation (NAT) rule for source translation of all
Internet-bound traffic.
[edit]
admin#
set security nat source rule-set interface-nat from zone trust
admin# set security nat source rule-set interface-nat to zone untrust
admin# set security nat source rule-set interface-nat rule rule1 match source-address
0.0.0.0/0 destination-address 0.0.0.0/0
admin# set security nat source rule-set interface-nat rule rule1 then source-nat interface
15.
Check the configuration for validity.
[edit]
admin#
commit check
configuration check succeeds
16.
Commit the configuration to activate it on the device.
[edit]
admin#
commit
commit complete
17.
Optionally, display the configuration to verify that it is correct.
[edit]
admin#
show
18.
Optionally, configure additional properties by adding the necessary configuration
statements. Then commit the changes to activate them on the services gateway.
[edit]
Copyright © 2016, Juniper Networks, Inc. 80
SRX320 Services Gateway Hardware Guide