[edit]
root#
set system login user admin class super-user authentication plain-text-password
New password:
password
Retype new password:
password
7.
Commit the configuration to activate it on the services gateway.
[edit]
root#
commit
8.
Log in as the administrative user you configured in Step
9.
Configure the name of the services gateway. If the name includes spaces, enclose the
name in quotation marks (“ ”).
configure
[edit]
admin#
set system host-name
host-name
10.
Configure the IP address and prefix length for the services gateway Ethernet interface.
[edit]
admin#
set interfaces fxp0 unit 0 family inet address
address/prefix-length
11.
Configure the traffic interface.
[edit]
admin#
set interfaces ge-0/0/0 unit 0 family inet address
address/prefix-length
admin#
set interfaces ge-0/0/1 unit 0 family inet address
address/prefix-length
NOTE:
The ge-0/0/0 interface is for the ISP, and the ge-0/0/1 interface
is for the LAN.
12.
Configure the default route.
[edit]
admin#
set routing-options static route 0.0.0.0/0 next-hop
gateway
13.
Configure basic security zones and bind them to traffic interfaces.
[edit]
admin#
set security zones security-zone untrust interfaces ge-0/0/0
admin#
set security zones security-zone trust interfaces ge-0/0/1
admin#
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic
system-services all
admin#
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic
protocols all
14.
Configure basic security policies.
[edit]
admin#
set security policies from-zone trust to-zone trust policy
policy-name
match
source-address any destination-address any application any
admin#
set security policies from-zone trust to-zone trust policy
policy-name
then permit
admin#
set security policies from-zone trust to-zone untrust policy
policy-name
match
source-address any destination-address any application any
admin#
set security policies from-zone trust to-zone untrust policy
policy-name
then permit
NOTE:
The actual configuration of the policies depends on your
requirements.
15.
Check the configuration for validity.
Copyright © 2016, Juniper Networks, Inc.
72
SRX340 Services Gateway Hardware Guide
Содержание SRX340
Страница 1: ...SRX340 Services Gateway Hardware Guide Modified 2016 05 23 Copyright 2016 Juniper Networks Inc ...
Страница 7: ...Part 7 Index Index 131 vii Copyright 2016 Juniper Networks Inc Table of Contents ...
Страница 8: ...Copyright 2016 Juniper Networks Inc viii SRX340 Services Gateway Hardware Guide ...
Страница 10: ...Copyright 2016 Juniper Networks Inc x SRX340 Services Gateway Hardware Guide ...
Страница 18: ...Copyright 2016 Juniper Networks Inc xviii SRX340 Services Gateway Hardware Guide ...
Страница 20: ...Copyright 2016 Juniper Networks Inc 2 SRX340 Services Gateway Hardware Guide ...
Страница 28: ...Copyright 2016 Juniper Networks Inc 10 SRX340 Services Gateway Hardware Guide ...
Страница 30: ...Copyright 2016 Juniper Networks Inc 12 SRX340 Services Gateway Hardware Guide ...
Страница 32: ...Copyright 2016 Juniper Networks Inc 14 SRX340 Services Gateway Hardware Guide ...
Страница 34: ...Copyright 2016 Juniper Networks Inc 16 SRX340 Services Gateway Hardware Guide ...
Страница 36: ...Copyright 2016 Juniper Networks Inc 18 SRX340 Services Gateway Hardware Guide ...
Страница 42: ...Copyright 2016 Juniper Networks Inc 24 SRX340 Services Gateway Hardware Guide ...
Страница 58: ...Copyright 2016 Juniper Networks Inc 40 SRX340 Services Gateway Hardware Guide ...
Страница 60: ...Copyright 2016 Juniper Networks Inc 42 SRX340 Services Gateway Hardware Guide ...
Страница 66: ...Copyright 2016 Juniper Networks Inc 48 SRX340 Services Gateway Hardware Guide ...
Страница 74: ...Copyright 2016 Juniper Networks Inc 56 SRX340 Services Gateway Hardware Guide ...
Страница 80: ...Copyright 2016 Juniper Networks Inc 62 SRX340 Services Gateway Hardware Guide ...
Страница 92: ...Copyright 2016 Juniper Networks Inc 74 SRX340 Services Gateway Hardware Guide ...
Страница 94: ...Copyright 2016 Juniper Networks Inc 76 SRX340 Services Gateway Hardware Guide ...
Страница 102: ...Copyright 2016 Juniper Networks Inc 84 SRX340 Services Gateway Hardware Guide ...
Страница 104: ...Copyright 2016 Juniper Networks Inc 86 SRX340 Services Gateway Hardware Guide ...
Страница 106: ...Copyright 2016 Juniper Networks Inc 88 SRX340 Services Gateway Hardware Guide ...
Страница 108: ...Copyright 2016 Juniper Networks Inc 90 SRX340 Services Gateway Hardware Guide ...
Страница 116: ...Copyright 2016 Juniper Networks Inc 98 SRX340 Services Gateway Hardware Guide ...
Страница 118: ...Copyright 2016 Juniper Networks Inc 100 SRX340 Services Gateway Hardware Guide ...
Страница 126: ...Copyright 2016 Juniper Networks Inc 108 SRX340 Services Gateway Hardware Guide ...
Страница 142: ...Copyright 2016 Juniper Networks Inc 124 SRX340 Services Gateway Hardware Guide ...
Страница 147: ...PART 7 Index Index on page 131 129 Copyright 2016 Juniper Networks Inc ...
Страница 148: ...Copyright 2016 Juniper Networks Inc 130 SRX340 Services Gateway Hardware Guide ...