Juniper SRX320 Manuel utilisateur

Quick Start

SRX320

IN THIS GUIDE

Step 1: Begin | 1

Step 2: Up and Running | 6

Step 3: Keep Going | 12

Step 1: Begin

IN THIS SECTION

Meet the SRX320 | 2

Install the SRX320 in a Rack | 2

Power On | 5

In this guide, we provide a simple, three-step path, to quickly get you up and running with your new SRX320. We’ve

simplified and shortened the installation and configuration steps, and included how-to videos. You'll learn how to install

the SRX320 in a rack, power it up, and deploy it on your network using the CLI.

NOTE: We think you'll want to check out our Guided Setup: SRX300 Line Firewalls. Our Guided Setup picks

up where this Day One+ ends, providing step-by-step instructions on how to easily secure and validate your

branch location.

Are you interested in getting hands-on experience with the topics and operations covered in this guide? Visit

Juniper Networks Virtual Labs and reserve your free sandbox today! You’ll find the Junos Day One Experience

sandbox in the stand alone demonstration category.

Meet the SRX320

The Juniper Networks®SRX320 Firewall provides next-generation security, routing, switching, and WAN connectivity in

a small desktop device. The SRX320 features eight 1GbE ports, including six RJ-45 network ports and two small form-factor

pluggable (SFP) transceiver ports. The SFP ports are MACsec capable.

Install the SRX320 in a Rack

IN THIS SECTION

What’s in the Box? | 2

What Else Do I Need? | 2

Rack It | 3

You can install the SRX320 on a table or desk, on a wall, or in a rack. We show you how to install it in a rack.

What’s in the Box?

•SRX320 Firewall

•A power cord appropriate for your geographic location

•A USB cable

What Else Do I Need?

DB-9 to RJ-45 cable or a DB-9 to RJ-45 adapter with a CAT5E copper cable—We no longer include a DB-9 to RJ-45 cable

or a DB-9 to RJ-45 adapter with a CAT5E copper cable as part of the device package. If you require a console cable, you

can order it separately with the part number JNP-CBL-RJ45-DB9 (DB-9 to RJ-45 adapter with a CAT5E copper cable).

To mount the SRX320 in a rack, you’ll need to order the rack mount kit appropriate for your installation. The required

rack mount kit depends on whether you have a PoE or non-PoE SRX320 model, and whether you already have a power

supply adapter tray. Check out the following table to see which rack mount kit you need.

Rack Mount Kit Without Power Supply

Adapter Tray

Rack Mount Kit with Power Supply Adapter

TrayModel

SRX320-RMK1

Includes:

•Eight flat-head M3x5mm Phillips

mounting screws

•Two mounting brackets

SRX320-RMK0

Includes:

•Twelve flat-head M3x5mm Phillips mounting

screws

•One mounting bracket

•One power supply adapter tray and two adapter

stopper brackets

SRX320 (non-PoE model)

SRX320-P-RMK1

Includes:

•Eight flat-head M3x5mm Phillips

mounting screws

•Two mounting brackets

SRX320-P-RMK0

Includes:

•Thirteen flat-head M3x5mm Phillips mounting

screws

•One mounting bracket

•One power supply adapter tray and three

adapter stopper brackets

SRX320 (PoE model)

You’ll also need to provide:

•Someone to help you do the installation

•Rack mount screws appropriate for your rack

•A number 2 Phillips (+) screwdriver

Rack It

1. Review General Safety Guidelines and Warnings.

2. Wrap and fasten one end of the electrostatic discharge (ESD) grounding strap around your bare wrist, and connect the

other end to a site ESD point.

3. Attach the mounting bracket and power supply adapter tray to the sides of the SRX320 using the screws that came

with the rack mount kit and the screwdriver.

4. Place the power supply adapter in the tray.

5. Lift the SRX320 and position it in the rack. Line up the bottom hole in the mounting brackets with a hole in each rack

rail, making sure the SRX320 is level.

6. While you’re holding the SRX320 in place, have a second person insert and tighten the rack mount screws to secure

the adapter tray and mounting brackets to the mounting rails. Make sure to tighten the screws in the two bottom holes

first and then tighten the screws in the two top holes.

g000951

7. Check that the mounting brackets on each side of the rack are level.

Power On

Now that you’ve installed the SRX320 in the rack, you’re ready to connect it to power.

1. Wrap and fasten one end of the electrostatic discharge (ESD) grounding strap around your bare wrist, and connect the

other end to a site ESD point.

NOTE: If the SRX320 has a supply adapter tray, you can perform step 2 and 3 with the power supply adapter

seated in the tray.

2. Plug the DC connector end of the power cable into the power connector at the back of the SRX320.

g000757

3. Plug the AC adapter end of the power cable into the power supply adapter.

4. If the AC power source outlet has a power switch, turn it off.

5. Plug the power cord into the AC power source outlet.

6. If the AC power source outlet has a power switch, turn it on.

The SRX320 powers up as soon as you connect it to power. When the STAT LED on the front panel is lit solid green,

the SRX320 is ready to use.

Step 2: Up and Running

IN THIS SECTION

SRX320 Provisioning Options | 7

Initial Configuration Using the CLI | 7

Now that the SRX320 is powered on, let’s do some initial configuration to get it up and running on the network.

NOTE: Be sure to check out our Guided Setup: SRX300 Line Firewalls. Our Guided Setup picks up where this

Day One+ leaves off, providing step-by-step instructions on how to easily secure and validate your branch

location.

SRX320 Provisioning Options

It’s simple to provision and manage the SRX320 and other devices on your network. Choose the configuration tool that’s

right for you:

•Junos CLI commands. In this guide we show you how to configure the SRX320 with CLI commands that leverage the

plug and play factory defaults.

•J-Web, Juniper Networks GUI is pre-installed on the SRX320. For information on performing initial configuration using

the J-Web setup wizard see Configure SRX Devices Using the J-Web Setup Wizard in the J-Web User Guide for SRX

Series Devices.

•Juniper Networks Cloud-based applications. These applications feature plug and play to quickly get you up and running

on the network:

•Juniper Sky™ Enterprise, Juniper Networks-hosted public cloud-based Software as a Service (SaaS) solution. You’ll

need to have a Juniper Sky Enterprise subscription service before you can use it to configure the SRX320. For more

information, check out the Juniper Sky Enterprise Getting Started Guide.

•Contrail Service Orchestration (CSO). If you're using Junos OS Release 19.2 or earlier, you can use Juniper Networks

Network Service Controller to configure the SRX320 with ZTP. Network Service Controller is a component of CSO.

See Configure the Device Using ZTP with Juniper Networks Network Service Controller.

To use CSO, you’ll need an authentication code. See the Contrail Service Orchestration (CSO ) Deployment Guide.

Initial Configuration Using the CLI

IN THIS SECTION

Connect to the Serial Console Port | 8

Perform Initial Configuration | 9

Congratulations! Your SRX is Up and Running | 11

You can use the console port on the SRX to do the initial configuration. This section assumes you start from a factory

default configuration. See SRX320 Firewall Hardware Guide for details on the SRX320 factory default configuration.

After you configure the SRX320, you can log in on a local LAN port, or remotely over the WAN interface, to manage and

configure the SRX using the CLI or J-Web.

We recommend that you use the ge-0/0/0 interface for WAN connectivity on the SRX320. By default this interface is

set to receive its Internet access configuration from the service provider.

NOTE: This examples assumes you are using DHCP to configure the WAN interface. If the WAN provider does

not support DHCP ypu’ll need to manually configure the WAN interface and related static routing. See Junos

Initial Configuration.

Have this information handy before you begin the initial configuration:

•Root password

•Hostname

Connect to the Serial Console Port

1. Plug one end of the Ethernet cable into the RJ-45 to DB-9 serial port adapter for your SRX320.

NOTE: We no longer include a DB-9 to RJ-45 cable or a DB-9 to RJ-45 adapter with a CAT5E copper cable

as part of the device package. If you require a console cable, you can order it separately with the part number

JNP-CBL-RJ45-DB9 (DB-9 to RJ-45 adapter with a CAT5E copper cable).

2. Plug the RJ-45 to DB-9 serial port adapter into the serial port on the management device.

3. Connect the other end of the Ethernet cable to the serial console port on the SRX320.

4. Start your asynchronous terminal emulation application (such as Microsoft Windows HyperTerminal) and select the

appropriate COM port to use (for example, COM1).

5. Verify that the serial port settings are set to the default:

•Baud rate—9600

•Parity—N

•Data bits—8

•Stop bits—1

•Flow control—none

NOTE: You can also connect to the SRX320 using a mini-USB console port. See the SRX320 Hardware Guide.

Perform Initial Configuration

1. Login as the root user and start the CLI. You don't need a password if you're running the factory default.

root@%cli

root>

NOTE: You can view the factory-default settings with the show configuration operational mode command.

2. Enter configuration mode.

root> configure

[edit]

root#

3. Since you're doing the initial configuration manually, you'll need to remove ZTP from the configuration. This stops the

periodic log messages that report on ZTP status.

Set the root authentication password and commit the change to deactivate ZTP.

[edit]

root# delete chassis auto-image-upgrade

root# delete system phone-home

root# set system root-authentication plain-text-password

New password: password

Retype new password: password

Issue the commit command to activate the candidate configuration that disables ZTP:

[edit]

root# commit

4. Enable root login over SSH, and allow SSH access over the WAN interface (ge-0/0/0).

[edit]

root# set system services ssh root-login allow

root# set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services ssh

5. Configure the hostname.

[edit]

root# set system host-name host_name

6. That’s it! The initial configuration is complete. Commit the configuration to activate the changes on the SRX.

[edit]

root# commit

Autres manuels pour SRX320

Table des matières

Autres manuels Juniper Matériel réseau

Juniper

Juniper SSR1500 Instructions d'installation

Juniper

Juniper PTX10004 Instructions d'installation

Juniper

Juniper CTP150 Manuel utilisateur

Juniper

Juniper PTX3000 Manuel utilisateur

Juniper

Juniper MX480 Instructions d'installation

Juniper

Juniper NetScreen-IDP 3.0 Manuel utilisateur

Juniper

Juniper NSM4000 Instructions d'installation

Juniper

Juniper Junos Space JA1500 Manuel utilisateur

Juniper

Juniper STRM 5000 Manuel

Juniper

Juniper NFX250 Manuel utilisateur

Juniper

Juniper NFX150 Instructions d'installation

Juniper

Juniper SRX3400 Manuel utilisateur

Juniper

Juniper XRE200 - Instructions d'installation

Juniper

Juniper CTP2000 Series Instructions d'installation

Juniper

Juniper SRX340 Instructions d'installation

Juniper

Juniper SSR1300 Manuel utilisateur

Juniper

Juniper NFX150 Manuel utilisateur

Juniper

Juniper SSR1400 Manuel utilisateur

Juniper

Juniper WXC 590 Manuel utilisateur

Juniper

Juniper Route Insight Manager Manuel utilisateur

Juniper

Juniper JATP700 Instructions d'installation

Juniper

Juniper SSR1400 Manuel utilisateur

Juniper

Juniper JSA7800 Manuel utilisateur

Juniper

Juniper SRX320 Manuel

Manuels Matériel réseau populaires d'autres marques

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL Manuel utilisateur

B&B Electronics

B&B Electronics ZXT9-IO-222R2 Manuel utilisateur

Yudor

Yudor YDS-16 Manuel utilisateur

D-Link

D-Link ShareCenter DNS-320L Manuel utilisateur

Samsung

Samsung ES1642dc Instructions d'utilisation

Honeywell Home

Honeywell Home LTEM-PV Instructions de montage

evertz

evertz 7700 Series Manuel utilisateur

D-Link

D-Link ShareCenter DNS-343 Manuel utilisateur

Asante

Asante AsanteBridge 1012 Manuel utilisateur

FireBrick

FireBrick FB2700 Manuel utilisateur

Audiovox Electronics

Audiovox Electronics ARWH2T Manuel utilisateur

ADC

ADC DSX-1 Manuel

NetComm

NetComm NF2 Manuel utilisateur

Alcatel-Lucent

Alcatel-Lucent 5620 Manuel utilisateur

Dell EMC

Dell EMC XC6420 Series Manuel utilisateur

Lanner

Lanner NCA-1020A Manuel utilisateur

Allied Telesis

Allied Telesis AT-TN121-A Manuel utilisateur

Arista

Arista CCA-ETM-Q12 Manuel utilisateur