6.
Configure an administrator account on the services gateway:
[edit]
root@#
set system login user admin class super-user authentication
plain-text-password
7.
Commit the configuration to activate it on the services gateway:
[edit]
root@#
commit
8.
Log in as the administrative user you configured in Step 6.
9.
Configure the name of the services gateway. If the name includes spaces, enclose the
name in quotation marks (“ ”) :
configure
[edit]
admin@#
set system host-name
host-name
10.
Configure the traffic interface:
[edit]
admin@#
set interfaces ge-0/0/1 unit 0 family inet address
address/prefix-length
11.
Configure the default route:
[edit]
admin@#
set routing-options static route 0.0.0.0/0 next-hop
gateway
12.
Configure basic security zones and bind them to traffic interfaces:
[edit]
admin@#
set security zones security-zone untrust interfaces ge-0/0/1
13.
Configure basic security policies:
[edit]
admin@#
set security policies from-zone trust to-zone untrust policy
policy-name
match source-address any destination-address any application any
admin@#
set security policies from-zone trust to-zone untrust policy
policy-name
then permit
14.
Create a NAT rule for source translation of all Internet-bound traffic:
[edit]
admin@#
set security nat source rule-set interface-nat from zone trust
admin@#
set security nat source rule-set interface-nat to zone untrust
admin@#
set security nat source rule-set interface-nat rule rule1 match source-address
0.0.0.0/0 destination-address 0.0.0.0/0
admin@#
set security nat source rule-set interface-nat rule rule1 then source-nat
interface
15.
Check the configuration for validity:
[edit]
admin@#
commit check
configuration check succeeds
95
Copyright © 2015, Juniper Networks, Inc.
Chapter 15: Performing Initial Configuration
Содержание SRX240 Series
Страница 1: ...SRX240 Services Gateway Hardware Guide Modified 2015 06 08 Copyright 2015 Juniper Networks Inc ...
Страница 8: ...Copyright 2015 Juniper Networks Inc viii SRX240 Services Gateway Hardware Guide ...
Страница 18: ...Copyright 2015 Juniper Networks Inc xviii SRX240 Services Gateway Hardware Guide ...
Страница 20: ...Copyright 2015 Juniper Networks Inc 2 SRX240 Services Gateway Hardware Guide ...
Страница 26: ...Copyright 2015 Juniper Networks Inc 8 SRX240 Services Gateway Hardware Guide ...
Страница 30: ...Copyright 2015 Juniper Networks Inc 12 SRX240 Services Gateway Hardware Guide ...
Страница 46: ...Copyright 2015 Juniper Networks Inc 28 SRX240 Services Gateway Hardware Guide ...
Страница 58: ...Copyright 2015 Juniper Networks Inc 40 SRX240 Services Gateway Hardware Guide ...
Страница 62: ...Copyright 2015 Juniper Networks Inc 44 SRX240 Services Gateway Hardware Guide ...
Страница 64: ...Copyright 2015 Juniper Networks Inc 46 SRX240 Services Gateway Hardware Guide ...
Страница 72: ...To install the device in a rack Copyright 2015 Juniper Networks Inc 54 SRX240 Services Gateway Hardware Guide ...
Страница 76: ...Copyright 2015 Juniper Networks Inc 58 SRX240 Services Gateway Hardware Guide ...
Страница 80: ...Copyright 2015 Juniper Networks Inc 62 SRX240 Services Gateway Hardware Guide ...
Страница 86: ...Copyright 2015 Juniper Networks Inc 68 SRX240 Services Gateway Hardware Guide ...
Страница 96: ...Copyright 2015 Juniper Networks Inc 78 SRX240 Services Gateway Hardware Guide ...
Страница 120: ...Copyright 2015 Juniper Networks Inc 102 SRX240 Services Gateway Hardware Guide ...
Страница 122: ...Copyright 2015 Juniper Networks Inc 104 SRX240 Services Gateway Hardware Guide ...
Страница 138: ...Copyright 2015 Juniper Networks Inc 120 SRX240 Services Gateway Hardware Guide ...
Страница 142: ...Copyright 2015 Juniper Networks Inc 124 SRX240 Services Gateway Hardware Guide ...
Страница 148: ...Copyright 2015 Juniper Networks Inc 130 SRX240 Services Gateway Hardware Guide ...
Страница 150: ...Copyright 2015 Juniper Networks Inc 132 SRX240 Services Gateway Hardware Guide ...
Страница 158: ...Copyright 2015 Juniper Networks Inc 140 SRX240 Services Gateway Hardware Guide ...
Страница 186: ...Copyright 2015 Juniper Networks Inc 168 SRX240 Services Gateway Hardware Guide ...
Страница 192: ...Copyright 2015 Juniper Networks Inc 174 SRX240 Services Gateway Hardware Guide ...
Страница 193: ...PART 7 Index Index on page 177 175 Copyright 2015 Juniper Networks Inc ...
Страница 194: ...Copyright 2015 Juniper Networks Inc 176 SRX240 Services Gateway Hardware Guide ...
Страница 198: ...Copyright 2015 Juniper Networks Inc 180 SRX240 Services Gateway Hardware Guide ...