background image

[edit]

root# commit

4. Enable root login over SSH, and allow SSH access over the WAN interface (ge-0/0/0).

[edit]

root# set system services ssh root-login allow

root# set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services ssh

5. Configure the hostname.

[edit]

root# set system host-name host_name

6. That’s it! The initial configuration is complete. Commit the configuration to activate the changes on the SRX.

[edit]

root# commit

Congratulations! Your SRX is Up and Running

Your SRX380 is now online and providing secure Internet access to devices attached to the LAN ports. You can manage

the device locally and remotely, using the Junos CLI, J-Web, or a cloud based provisioning service. Here's what your

network looks like:

jn-000273

Sky Enterprise

Remote Management

Station

SRX380

(Factory Default

+ Initial CLI Config)

DHCP Clients

Internet

CSO

DHCP Server

Untrust

Trust

ge-0/0/0
(DHCP Client)

SNAT

(DHCP Server

192.168.1.0/24)

Local Management

Station (Optional)

ge-0/0/1 to 15;

xe-0/0/16-18

9

Summary of Contents for SRX380

Page 1: ...u ll learn how to install the SRX380 in a rack power it up and deploy it on your network using the CLI NOTE We think you ll want to check out our Guided Setup SRX300 Line Firewalls Our Guided Setup picks up where this Day One ends providing step by step instructions on how to easily secure and validate your branch location Are you interested in getting hands on experience with the topics and opera...

Page 2: ...X380 provides greater port density than other models in the SRX300 line of devices all in a 1 U form factor Install the SRX380 IN THIS SECTION What s in the Box 2 What Else Do I Need 3 Rack It 3 What s in the Box SRX380 Services Gateway Power cord appropriate for your geographic location RJ 45 cable DB 9 adapter USB console cable Power cord retainer clip Rack mount kit with Six flat head 4 40 moun...

Page 3: ...lectrostatic discharge ESD grounding strap around your bare wrist and connect the other end to a site ESD point 3 Attach the mounting brackets to the side mounting rails using the six flat head mounting screws g100945 1 2 1 2 2 1 Mounting rail Mounting bracket 4 Attach the mounting rails to the sides of the SRX380 using the M4x6 mm Phillips flat head mounting screws g100946 5 Lift the SRX380 and p...

Page 4: ...hen tighten the screws in the two top holes g100947 7 Continue holding the SRX380 in place and have the second person slide the mounting blades into the channel of the mounting rails g100948 8 Screw the mounting blades to the rack using the rack mount screws 9 Check that the mounting brackets on each side of the rack are level Power On Now that you ve installed your SRX380 in the rack you re ready...

Page 5: ... loop until you have enough space to insert the power cord into the power cord socket 6 Plug in the power cord firmly to the SRX380 power cord socket 7 Slide the loop on the retainer strip toward the power supply until it is snug against the base of the power cord coupler 8 Press the tab on the loop and draw out the loop into a tight circle g100940 9 If the AC power source outlet has a power switc...

Page 6: ...this guide we show you how to configure the SRX380 with CLI commands that leverage the plug and play factory defaults J Web Juniper Networks Setup wizard that is preinstalled on the SRX380 For information on performing initial configuration using the J Web setup wizard see Configure SRX Devices Using the J Web Setup Wizard in the J Web User Guide for SRX Series Devices Juniper Sky Enterprise Junip...

Page 7: ...t access configuration from the service provider NOTE This examples assumes you are using DHCP to configure the WAN interface If the WAN provider does not support DHCP you ll need to manually configure the WAN interface and related static routing See Junos Initial Configuration Have this information handy before you begin the initial configuration Root password Hostname Connect to the Serial Conso...

Page 8: ...guration operational mode command 2 Enter configuration mode root configure edit root 3 Since you re doing the initial configuration manually you ll need to remove ZTP from the configuration This stops the periodic log messages that report on ZTP status Set the root authentication password and commit the change to deactivate ZTP edit root delete chassis auto image upgrade root delete system phone ...

Page 9: ...to activate the changes on the SRX edit root commit Congratulations Your SRX is Up and Running Your SRX380 is now online and providing secure Internet access to devices attached to the LAN ports You can manage the device locally and remotely using the Junos CLI J Web or a cloud based provisioning service Here s what your network looks like jn 000273 Sky Enterprise Remote Management Station SRX380 ...

Page 10: ... in the same subnet with Layer 2 connectivity All traffic is permitted between trust zone interfaces All traffic originating in the trust zone is permitted in the untrust zone Matching response traffic is allowed back from the untrust to the trust zone Traffic that originates from the untrust zone is blocked from the trust zone The SRX performs source NAT S NAT using the WAN interface s IP for tra...

Page 11: ...d Security Services Set up your SRX380 with advanced security measures to protect and defend your network See Installing Software on SRX Series Devices Manage software upgrades on your SRX380 Visit the Security Design Center See automate and protect your network with Juniper Security Visit Juniper Networks Virtual Labs and reserve your free sandbox You ll find the Junos Day One Experience sandbox ...

Page 12: ...be page Get short and concise tips and instructions that provide quick answers clarity and insight into specific features and functions of Juniper technologies Visit the Getting Started page on the Juniper Learning Portal View a list of the many free technical trainings we offer at Juniper Juniper Networks the Juniper Networks logo Juniper and Junos are registered trademarks of Juniper Networks In...

Reviews: