Juniper SRX100B, Руководство по оборудованию

Страница: 102 / 172

5.
Set the root authentication password by entering a cleartext password, an encrypted
password, or an SSH public key string (DSA or RSA).
[edit]
root@#
set system root-authentication plain-text-password
New password: password
Retype new password: password
6.
Configure an administrator account on the device.
[edit]
root@#
set system login user admin class super-user authentication
plain-text-password
7.
Commit the configuration to activate it on the device.
[edit]
root@#
commit
8.
Log in as the administrative user you configured in Step 6.
9.
Configure the name of the device. If the name includes spaces, enclose the name in
quotation marks (“ ”).
configure
[edit]
admin@#
set system host-name host-name
10.
Configure the traffic interface.
[edit]
admin@#
set interfaces fe-0/0/1 unit 0 family inet address address/prefix-length
11.
Configure the default route.
[edit]
admin@#
set routing-options static route 0.0.0.0/0 next-hop gateway
12.
Configure basic security zones and bind them to traffic interfaces.
[edit]
admin@#
set security zones security-zone untrust interfaces fe-0/0/1
13.
Configure basic security policies.
[edit]
admin@#
set security policies from-zone trust to-zone untrust policy policy-name
match source-address any destination-address any application any
root@# set security policies from-zone trust to-zone untrust policy policy-name then
permit
14.
Create a NAT rule for source translation of all Internet bound traffic.
[edit]
admin@#
set security nat source rule-set interface-nat from zone trust
admin@# set security nat source rule-set interface-nat to zone untrust
admin@# set security nat source rule-set interface-nat rule rule1 match source-address
0.0.0.0/0 destination-address 0.0.0.0/0
admin@# set security nat source rule-set interface-nat rule rule1 then source-nat
interface
Copyright © 2015, Juniper Networks, Inc. 84
SRX100 Services Gateway Hardware Guide for B and H Model Numbers