Juniper SRX220, Руководство по оборудованию

Страница: 96 / 182

Before configuring the device, gather the configuration information required to deploy
the device in your network. At minimum, the setup wizard requires the following
information:
• Device name to be used on the network
• Password for the root user
•
Time information for the services gateway location:
•
Local time zone
• Name or IP address of a Network Time Protocol (NTP) server, if NTP is used to set
the time on the services gateway
•
Local date and time if an NTP server is not used to set the time
Understanding the Factory-Default Configuration
Your services gateway comes configured with a factory-default configuration. This
configuration sets up the following network topology:
•
Interface
ge-0/0/0
(port 0/0) is configured for Internet access. A DHCP client running
on the interface enables the interface to receive its network settings—IP address,
default gateway, and DNS servers—from an Internet service provider (ISP).
• Interfaces
ge-0/0/1
through
ge-0/0/7
(port 0/1 through port 0/7) are configured as
switched interfaces in a VLAN on which the IP address
192.168.1.1/24
is configured.
• A DHCP server is active on interfaces ge-0/0/1 through ge-0/0/7 . The DHCP server
assigns IP addresses in the 192.168.1.0/24 network to connected devices.
The default configuration also includes the following security configuration:
•
Two security zones are created: trust and untrust.
• Interface ge-0/0/0 is in the untrust zone, while interfaces ge-0/0/1 through ge-0/0/7
are in the trust zone.
• A security policy is created that permits outbound traffic from the trust zone to the
untrust zone. Inbound traffic originating in the untrust zone is blocked.
•
Source Network Address Translation (NAT) is configured on the trust zone.
Understanding Built-In Ethernet Ports and Initial Configuration
During the initial configuration of the services gateway, how you use the built-in Ethernet
ports (ports 0/0 through 0/7) depends on the initial configuration you are performing:
• Configuration using autoinstallation—Use built-in Ethernet port 0/0 to connect to the
DHCP server. A DHCP client is configured on this interface, allowing the services gateway
to receive its IP address from the DHCP server.
•
Configuration using the setup wizard—Use the following built-in Ethernet ports:
Copyright © 2016, Juniper Networks, Inc. 78
SRX220 Services Gateway Hardware Guide for H Model Numbers