Juniper SRX3400, Hardware Manual, Page: 101 / 232

11.
Configure the traffic interface.
[edit]
admin@#
set interfaces ge-0/0/0 unit 0 family inet address address/prefix-length
admin@#
set interfaces ge-0/0/1 unit 0 family inet address address/prefix-length
12.
Configure the default route.
[edit]
admin@#
set routing-options static route 0.0.0.0/0 next-hop gateway
13.
Configure basic security zones and bind them to traffic interfaces.
[edit]
admin@#
set security zones security-zone trust interfaces ge-0/0/0
admin@# set security zones security-zone untrust interfaces ge-0/0/1
14.
Configure basic security policies.
[edit]
admin@#
set security policies from-zone trust to-zone untrust policy policy-name match
source-address any destination-address any application any
admin@# set security policies from-zone trust to-zone untrust policy policy-name then permit
15.
Check the configuration for validity.
[edit]
admin@#
commit check
configuration check succeeds
16.
Commit the configuration to activate it on the services gateway.
[edit]
admin@#
commit
commit complete
17.
Optionally, display the configuration to verify that it is correct.
admin@# show
## Last changed: 2008-05-07 22:43:25 UTC
version "9.2I0 [builder]";
system {
autoinstallation;
host-name henbert;
root-authentication {
encrypted-password "$1$oTVn2KY3$uQe4xzQCxpR2j7sKuV.Pa0"; ## SECRET-DATA
}
login {
user admin {
uid 928;
class super-user;
authentication {
encrypted-password "$1$cdOPmACd$QvreBsJkNR1EF0uurTBkE."; ##
SECRET-DATA
}
}
}
services {
ssh;
web-management {
http {
interface ge-0/0/0.0;
}
}
}
syslog {
user * {
87 Copyright © 2013, Juniper Networks, Inc.
Chapter 9: Performing Initial Software Configuration on the SRX3400 Services Gateway