Juniper SRX380 Manuel utilisateur

Day One+

SRX380

IN THIS GUIDE

Step 1: Begin | 1

Step 2: Up and Running | 6

Step 3: Keep Going | 10

Step 1: Begin

IN THIS SECTION

Meet the SRX380 | 2

Install the SRX380 | 2

Power On | 4

In this guide, we provide a simple, three-step path, to quickly get you up and running with your new SRX380. We’ve

simplified and shortened the installation and configuration steps, and included how-to videos. You'll learn how to install

the SRX380 in a rack, power it up, and deploy it on your network using the CLI.

NOTE: We think you'll want to check out our Guided Setup: SRX300 Line Firewalls. Our Guided Setup picks

up where this Day One+ ends, providing step-by-step instructions on how to easily secure and validate your

branch location.

Are you interested in getting hands-on experience with the topics and operations covered in this guide? Visit

Juniper Networks Virtual Labs and reserve your free sandbox today! You’ll find the Junos Day One Experience

sandbox in the stand alone category.

Meet the SRX380

The Juniper Networks®SRX380 Services Gateway is a high-performance, all-in-one secure SD-WAN gateway. It provides

your network with superior and reliable WAN connectivity while consolidating security, routing, and switching for distributed

enterprise offices. With sixteen 1-Gigabit Ethernet PoE+ ports and four 10-Gigabit Ethernet ports, the SRX380 provides

greater port density than other models in the SRX300 line of devices, all in a 1-U form factor.

Install the SRX380

IN THIS SECTION

What’s in the Box? | 2

What Else Do I Need? | 3

Rack It | 3

What’s in the Box?

•SRX380 Services Gateway

•Power cord appropriate for your geographic location

•RJ-45 cable

•DB-9 adapter

•USB console cable

•Power cord retainer clip

•Rack mount kit with:

•Six flat-head 4-40 mounting screws

•Twelve flat-head M4x6-mm Phillips mounting screws

•Four mounting brackets (includes two 2-inch-recess brackets) that attach to the mounting rails

•Two mounting rails

•Two mounting blades

What Else Do I Need?

You’ll also need:

•Someone to help you do the installation

•Eight rack mount screws appropriate for your rack

•A number two Phillips (+) screwdriver

Rack It

Here’s how to install the SRX380 in a rack:

1. Review General Safety Guidelines and Warnings

2. Wrap and fasten one end of the electrostatic discharge (ESD) grounding strap around your bare wrist, and connect the

other end to a site ESD point.

3. Attach the mounting brackets to the side mounting rails using the six flat-head mounting screws.

g100945

2—1—Mounting railMounting bracket

4. Attach the mounting rails to the sides of the SRX380 using the M4x6-mm Phillips flat-head mounting screws.

g100946

5. Lift the SRX380 and position it in the rack. Line up the bottom hole in each mounting bracket with a hole in each rack

rail, making sure the SRX380 is level.

6. While you’re holding the SRX380 in place, have a second person insert and tighten the rack mount screws to secure

the mounting brackets to the rack rails. Make sure they tighten the screws in the two bottom holes first and then

tighten the screws in the two top holes.

g100947

7. Continue holding the SRX380 in place and have the second person slide the mounting blades into the channel of the

mounting rails.

g100948

8. Screw the mounting blades to the rack using the rack mount screws.

9. Check that the mounting brackets on each side of the rack are level.

Power On

Now that you’ve installed your SRX380 in the rack, you’re ready to connect it to power.

1. Wrap and fasten one end of the electrostatic discharge (ESD) grounding strap around your bare wrist, and connect the

other end to a site ESD point.

2. Attach a grounding cable to earth ground and then attach the other end to the SRX380’s grounding points.

g100950

3. On the SRX380 rear panel, push the end of the retainer strip into the slot above the power cord socket until the strip

snaps into place.

4. Press the small tab on the retainer strip to loosen the loop.

5. Slide the loop until you have enough space to insert the power cord into the power cord socket.

6. Plug in the power cord firmly to the SRX380 power cord socket.

7. Slide the loop on the retainer strip toward the power supply until it is snug against the base of the power cord coupler.

8. Press the tab on the loop and draw out the loop into a tight circle.

g100940

9. If the AC power source outlet has a power switch, turn it off.

10. Plug in the AC power cord to the power source outlet.

11. If the AC power source outlet has a power switch, turn it on.

The SRX380 powers up as soon as you connect it to power. When the PWR LED on the front panel is lit solid green,

the SRX380 is ready to use.

Step 2: Up and Running

IN THIS SECTION

SRX380 Provisioning Options | 6

Initial Configuration Using the CLI | 7

Now that the SRX380 is powered on, let’s do some initial configuration to get the switch up and running on the network.

NOTE: Be sure to check out our Guided Setup: SRX300 Line Firewalls. Our Guided Setup picks up where this

Day One+ leaves off, providing step-by-step instructions on how to easily secure and validate your branch

location.

SRX380 Provisioning Options

It’s simple to provision and manage the SRX380 and other devices on your network. You can choose the configuration

tool that’s right for you:

•Junos CLI commands. In this guide we show you how to configure the SRX380 with CLI commands that leverage the

plug and play factory defaults.

•J-Web, Juniper Networks Setup wizard that is preinstalled on the SRX380. For information on performing initial

configuration using the J-Web setup wizard see Configure SRX Devices Using the J-Web Setup Wizard in the J-Web

User Guide for SRX Series Devices.

•Juniper Sky™ Enterprise, Juniper Networks-hosted public cloud-based Software as a Service (SaaS) solution.

NOTE: You’ll need to have a Juniper Sky Enterprise subscription service before you can use it to configure

the SRX380. For more information, check out the Juniper Sky Enterprise Getting Started Guide.

•Juniper Networks Contrail Service Orchestration (CSO). To use CSO, you’ll need an authentication code. See the Contrail

Service Orchestration (CSO ) Deployment Guide.

Initial Configuration Using the CLI

IN THIS SECTION

Connect to the Serial Console Port | 7

Perform Initial Configuration | 8

Congratulations! Your SRX is Up and Running | 9

You can use the console port on the SRX to do the initial configuration. This section assumes you start from a factory

default configuration. See SRX380 Services Gateway Hardware Guide for details on the SRX380 factory default

configuration.

After you configure the SRX380, you can log in on a local LAN port, or remotely over the WAN interface, to manage and

configure the SRX using the CLI or J-Web.

We recommend that you use the ge-0/0/0 interface for WAN connectivity on the SRX380. By default, this interface is

set to receive its Internet access configuration from the service provider.

NOTE: This examples assumes you are using DHCP to configure the WAN interface. If the WAN provider does

not support DHCP, you’ll need to manually configure the WAN interface and related static routing. See Junos

Initial Configuration.

Have this information handy before you begin the initial configuration:

•Root password

•Hostname

Connect to the Serial Console Port

1. Plug one end of the Ethernet cable into the RJ-45 to DB-9 serial port adapter for your SRX345.

2. Plug the RJ-45 to DB-9 serial port adapter into the serial port on the management device.

3. Connect the other end of the Ethernet cable to the serial console port on the SRX380.

4. Start your asynchronous terminal emulation application (such as Microsoft Windows HyperTerminal) and select the

appropriate COM port to use (for example, COM1).

5. Verify that the serial port settings are set to the default:

•Baud rate—9600

•Parity—N

•Data bits—8

•Stop bits—1

•Flow control—none

NOTE: You can also connect to the SRX380 using a mini-USB console port. See the SRX380 Hardware Guide.

Perform Initial Configuration

1. Login as the root user and start the CLI. You don't need a password if you're running the factory default.

root@%cli

root>

NOTE: You can view the factory-default settings with the show configuration operational mode command.

2. Enter configuration mode.

root> configure

[edit]

root#

3. Since you're doing the initial configuration manually, you'll need to remove ZTP from the configuration. This stops the

periodic log messages that report on ZTP status.

Set the root authentication password and commit the change to deactivate ZTP.

[edit]

root# delete chassis auto-image-upgrade

root# delete system phone-home

root# set system root-authentication plain-text-password

New password: password

Retype new password: password

Issue the commit command to activate the candidate configuration that disables ZTP:

[edit]

root# commit

4. Enable root login over SSH, and allow SSH access over the WAN interface (ge-0/0/0).

[edit]

root# set system services ssh root-login allow

root# set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services ssh

5. Configure the hostname.

[edit]

root# set system host-name host_name

6. That’s it! The initial configuration is complete. Commit the configuration to activate the changes on the SRX.

[edit]

root# commit

Congratulations! Your SRX is Up and Running

Your SRX380 is now online and providing secure Internet access to devices attached to the LAN ports. You can manage

the device locally and remotely, using the Junos CLI, J-Web, or a cloud based provisioning service. Here's what your

network looks like:

jn-000273

Sky Enterprise

Remote Management

Station

SRX380

(Factory Default

+ Initial CLI Config)

DHCP Clients

Internet

CSO

DHCP Server

UntrustTrust

ge-0/0/0

(DHCP Client)

SNAT

(DHCP Server

192.168.1.0/24)

Local Management

Station (Optional)

ge-0/0/1 to 15;

xe-0/0/16-18

A few things to keep in mind about your new SRX380 branch network:

•You access the SRX CLI or J-Web user interface locally using the 192.168.1.1 address. To access the SRX remotely,

specify the IP address assigned by the WAN provider. Simply issue a show interfaces ge-0/0/0 terse CLI command to

confirm the address in use by the WAN interface.

•The management interface is configured as a DHCP server for the 192.168.1.0/24 subnet.

•Devices attached to the LAN ports are configured to use DHCP. They receive their network configuration from the

SRX. These devices obtain an IP address from the 192.168.2.0/24 address pool and use the SRX as their default gateway.

•All LAN ports are in the same subnet with Layer 2 connectivity. All traffic is permitted between trust zone interfaces.

•All traffic originating in the trust zone is permitted in the untrust zone. Matching response traffic is allowed back from

the untrust to the trust zone. Traffic that originates from the untrust zone is blocked from the trust zone.

•The SRX performs source NAT (S-NAT) using the WAN interface’s IP for traffic sent to the WAN that originated from

the trust zone.

•Traffic associated with specific system services (HTTPS, DHCP, TFTP, and SSH) is permitted from the untrust zone to

the local host. All local host services and protocols are allowed for traffic that originates from the trust zone.

Step 3: Keep Going

IN THIS SECTION

What’s Next? | 11

General Information | 11

Learn With Videos | 12

Congratulations! Your SRX380 is configured and ready to go. Here are some things you can do next.

Autres manuels pour SRX380

Table des matières

Autres manuels Juniper Porte

Juniper

Juniper BX7000 Instructions d'installation

Juniper

Juniper SRX4200 Guide de configuration

Juniper

Juniper SRX 5800 Manuel utilisateur

Juniper

Juniper SRX3600 Instructions d'installation

Juniper

Juniper SRX 5800 Manuel utilisateur

Juniper

Juniper SRX5600 Instructions d'installation

Juniper

Juniper SRX340 Manuel utilisateur

Juniper

Juniper SRX4100 Instructions d'installation

Juniper

Juniper SRX5600 Manuel utilisateur

Juniper

Juniper SRX340 Guide de configuration

Juniper

Juniper SRX110 Manuel utilisateur

Juniper

Juniper SRX650 Instructions d'installation

Juniper

Juniper SRX650 Manuel utilisateur

Juniper

Juniper VGW VIRTUAL GATEWAY Manuel utilisateur

Juniper

Juniper SRX300 Series Instructions d'installation

Juniper

Juniper SRX110 Manuel utilisateur

Juniper

Juniper SSG5 Manuel utilisateur

Juniper

Juniper SRX1500 Guide de configuration

Juniper

Juniper SRX110 H2 Instructions d'installation

Juniper

Juniper SRX345 Instructions d'installation

Juniper

Juniper SRX650 Manuel utilisateur

Juniper

Juniper SRX345 Manuel utilisateur

Juniper

Juniper SRX340 Instructions d'installation

Juniper

Juniper SRX 5800 Instructions d'installation

Manuels Porte populaires d'autres marques

LST

LST M500RFE-AS Manuel utilisateur

Kinnex

Kinnex Media Gateway Manuel utilisateur

2N Telekomunikace

2N Telekomunikace 2N StarGate Manuel utilisateur

Mitsubishi Heavy Industries

Mitsubishi Heavy Industries Superlink SC-WBGW256 Manuel utilisateur

ZyXEL Communications

ZyXEL Communications ZYWALL2 ET 2WE Manuel utilisateur

Telsey

Telsey CPVA 500 - SIP Manuel utilisateur

RTA

RTA 460A-NNA4 Fiche technique

Shaw

Shaw Gateway HDPVR Manuel utilisateur

ABB

ABB VSN900 Guide de démarrage rapide

Commander

Commander Pulse Manuel utilisateur

2N Telekomunikace

2N Telekomunikace ATEUS EasyGate 501309E Manuel utilisateur

NETGEAR

NETGEAR C6300BD Manuel utilisateur

Amit

Amit CDW531AM Manuel utilisateur

HMS

HMS Netbiter EasyConnect EC150 Manuel utilisateur

Huawei

Huawei EchoLife HG620 Manuel utilisateur

AT&T

AT&T U-verse 3801 Manuel d'utilisation et d'entretien

Logic IO

Logic IO RTCU MX2 turbo Manuel utilisateur

Suttle

Suttle MediaMAX MXM-521 Manuel utilisateur