V
Getting Started Guide
SRX 210 Services Gateway
Use the instructions in this guide to help you connect the SRX 210 services gateway to your network. For details, see the
SRX 210 Services Gateway Hardware Guide at http://www.juniper.net/techpubs/a057.html.
SRX
SRX 210
210 Services
Services Gateway
GatewayFront
FrontPanel
Panel
1)
Alarm
LED
6)
HA
LED
1. Alarm LED
6. HA LED
2) Status
Status LED
LED
7) Express
Express card
card LED
LED
2.
7.
3)
Mini-PIM
LED
8)
Power
Button
3. Mini-PIM LED
8. Power button
4) Mini-PIM
Mini-PIM slot
Slot
9) Reset
Reset config
Configbutton
Button
4.
9.
5)
Power
LED
10)
USB
Port
5. Power LED
SRX
210210
Services
Gateway
BackBack
PanelPanel
SRX
Services
Gateway
1) Power
Supply
Point
2) 6) Express
Card Slot
1. Power
Supply
point
6. ExpressCard
slot
Cable
Tie Holder
2. Cable
tie holder
3) Grounding
Point
3. Grounding
point
4) Lock
4. Lock
5) Exhaust
Vents
5. Exhaust
vents
11)USB
Console
10.
portsPort
12)Console
Gigabit port
Ethernet
11.
Ports
12. Gigabit Ethernet ports
13)Fast
FastEthernet
Ethernetports
Ports
13.
The
The following
following three
three types
types of
of SRX
SRX 210
210 services
services gateways
gateways are
are available:
available:
Devices
Devices
SRX
210B
SRX210B
SRX
210 H
SRX210H
SRX210H-POE
SRX210H-POE
DDR Memory
512 MB
PoE
DDR Memory
512 MBNo
1 GB
1 GB
1 GB
1 GB
PoE
No
No
No
Yes (50 watts supported on four ports
(ge0/0/1
to supported across four ports (ge-0/0/
Yes.
50 watts
ge-0/0/1 and fe-0/0/2 to fe-0/0/3)) 0, ge-0/0/1, fe-0/0/2, and fe-0/0/3).
CONNECTING
CONNECTING AND
AND CONFIGURING
CONFIGURING THE
THE DEVICE
DEVICE
Use the instructions below to connect and set up the SRX 210 services gateway to protect your network. Refer to the
LEDs on the front panel of the device to help you determine the status of the device.
Step
Step 11
Step
Step 33
Connect
the management
management device
device to
to the
the services
services gateway
gateway using
using either
either of
of
Connect the
the following
following methods:
methods:
the
Note: The
and
will
assign
an
Note:
The services
servicesgateway
gatewayfunctions
functionsasasa aDHCP
DHCPserver
server
and
will
assign
IP address to the management device.
an IP address to the management device.
Ensure that the management device acquires an IP address on the
Ensure that the management device acquires an IP address on the
192.168.1/24 subnetwork (other than 192.168.1.1) from the gateway.
192.168.1/24 subnetwork (other than 192.168.1.1) from the device.
••
•
•
Connect an
ge-0/0/0
port
to the
Ethernet
port
Connect
anEthernet
Ethernetcable
cablefrom
fromthethe
ge-0/0/0
port
to the
Ethernet
on the management device (workstation or laptop).
port on the management device (workstation or laptop).
(We recommend this connection method.)
(We recommend this connection method.)
Connect an RJ-45 cable from the console port to the supplied DB-9
Connectwhich
an RJ-45
from
port
supplied DBadapter,
thencable
connects
to the
the console
serial port
on to
thethe
workstation.
9 adapter,
then
connects
to the serial port on the
(Serial
portwhich
settings:
9600
8-N-1-N)
(Serial port settings: 9600 8-N-1-N)
Step workstation.
2
Connect
Step 2 the power cable to the device and a power source. (We
recommend using a surge protector.) Note the following indications:
Connect the power cable to the device and a power source. (We
•
Power LED (green): The device is receiving power.
recommend using a surge protector.) Note the following indications:
•
Status LED (steadily green): The device is operating normally.
•
Power LED (green): The device is receiving power.
•
Status LED (green): The device is operating normally.
Note: If an IP address is not assigned to the management device, manually
Note:
If ananIPIPaddress
to the
management
device,
configure
addressisinnot
the assigned
192.168.1/24
subnetwork.
Do not
assign the
manually
configure
an
IP
address
in
the
192.168.1/24
subnetwork.
192.168.1.1 IP address to the management device, as this IP address isDo
not
assigntothe
assigned
the192.168.1.1
gateway. IP address to the management device, as this
IP
address
is assigned to the device.
Step
4
Step
Access4 J-Web interface:
1. Launch
a Web
browser from the management device.
Access
J-Web
interface:
2.
1.
2.
3.
Enter 192.168.1.1 in the URL address field.
Launch a Web browser from the management device.
Enter 192.168.1.1 in the URL address field.
Specify the default user name as root. Do not enter any value in the
Password field.
Getting Started Guide
4.
5.
Press Enter. The J-Web Dashboard page is displayed.
Click the Configuration tab. The J-Web Quick Configuration Set
Up page is displayed.
4.
5.
6.
Click Add under IPv4 Addresses and Prefixes.
Enter an IP address and subnet mask in the IPv4 Address and
Prefix field.
Click OK. The configured IP address is included in the Address
Prefix column.
Step 8
Zones are configured in the factory default settings as follows:
Security Policy on Zone
Action
trust to trust
permit
trust to untrust
permit
untrust to trust
deny
default
deny
Note: By default, ge-0/0/0.0 is in the trust zone.
Navigate to Quick Configuration > Zones to modify the zone settings,
if required.
Step 5
Configure the following basic settings for your services gateway:
Step 9
Modify the security policy as follows:
Field
Your Action
Identification:
2.
Host name
Type the hostname (required).
Domain name
Type the domain name (optional).
Root password
Type a plaintext password that the system
encrypts (required). You must specify a
password that contains at least one uppercase
letter or one number.
Verify root password Retype the root password (required).
All Network and Management Access Settings are optional.
Step 6
Click Apply to apply the configuration.
Step 7
Configure an interface as follows:
1.
2.
3.
1.
3.
Select Configuration > Quick Configuration> Security Policies
in J-Web interface.
Select the Zone directions. For more information on configuring
zones, see the JUNOS Software Interfaces and Routing
Configuration Guide.
Click Apply.
Powering Off the Device
To power off the services gateway, you can shut it down in one of the
following ways:
•
Graceful shutdown—Press and immediately release the power
button. The device begins gracefully shutting down the operating
system.
•
Immediate shutdown—Press the power button and hold it for 10
seconds. The device immediately shuts down. Press the button
again once to power on the device.
Note: You can reboot or halt the system in J-Web interface by
selecting Manage > Reboot.
Select Quick Configuration > Interfaces in J-Web interface.
Click on the interface you want to configure under the Interface
Name column.
Click Add under Logical Interfaces.
Copyright Notice
Copyright © 2009 Juniper Networks, Inc. All rights reserved.
Juniper Networks, the Juniper Networks logo, JUNOS, NetScreen, ScreenOS, and Steel-Belted Radius are registered trademarks of Juniper
Networks, Inc. in the United States and other countries. JUNOSe is a trademark of Juniper Networks, Inc. All other trademarks, service marks,
registered trademarks, or registered service marks are the property of their respective owners. All specifications are subject to change without notice.
P/N 530-030460-01 Rev. 01