Juniper JUNOS J Series Manuel utilisateur

JUNOS Enhanced Services J-series™

Services Router Quick Start

12 October 2007

Part Number: 530-021753–01

Revision 1

JUNOS Enhanced Services J-series Services Routers provide flow-based security

services, IP routing, WAN and LAN connectivity, and management services. Available

in several models, Services Routers typically connect small, branch, or regional offices

to a central site, and link Internet service provider (ISP) networks.

The JUNOS Enhanced Services J-series Services Router Quick Start provides instructions

to initially set up J2320, J2350, J4350, and J6350 Services Routers. You need no

previous JUNOS software experience, but must have managed a network and

configured other routers. For more information, see the JUNOS Enhanced Services

J-series documentation at http://www.juniper.net/techpubs.

Contents What You Need To Know ................................................................................3

Management IP Address ...........................................................................3

J-Web Access ............................................................................................3

CLI Console Access ...................................................................................3

Secure Context and Router Context ..........................................................3

Required Licenses .....................................................................................4

Slot Numbers ............................................................................................4

Interfaces and Ports ..................................................................................4

Remote Access .........................................................................................4

Before You Begin .............................................................................................5

Installing a Services Router .............................................................................6

Installing J2320 and J2350 Services Routers .............................................6

Installing J4350 or J6350 Services Routers ................................................7

Connecting Power to a Services Router ...........................................................8

■1

Basic Connection and Configuration with the J-Web Interface .........................9

Step 1. Connecting, Logging In, and Starting the J-Web Interface .............9

Step 2. Configuring Basic Settings with J-Web Quick Configuration .........10

Step 3. Installing the JUNOS Enhanced Services Software .......................12

Step 4. Adding Licenses with the J-Web Interface ...................................12

Basic Connection and Configuration with the CLI ..........................................12

Step 1. Connecting, Logging In, and Starting the CLI ..............................12

Step 2. Configuring Basic Settings with the CLI .......................................13

Step 3. Installing the JUNOS Enhanced Services Software .......................14

Step 4. Adding Licenses with the CLI ......................................................14

J-Web Basics ..................................................................................................15

JUNOS Enhanced Services CLI Basics ............................................................15

Safety Warnings Summary ............................................................................17

Compliance Statements for NEBS ..................................................................19

Declarations of Conformity ...........................................................................20

JUNOS Enhanced Services and Related Documentation ................................21

Requesting Support .......................................................................................25

Revision History ............................................................................................25

2■

JUNOS Enhanced Services J-series™Services Router Quick Start

What You Need To Know

Management IP Address

When you first connect a management PC or laptop to a built-in Ethernet port on a

Services Router, the router acts as a DHCP client and attempts to perform an

autoinstallation. If it does not find a DHCP server, the router assigns 192.168.1.1/24

as the IP address for port 0. (If you are connected to port 1, 192.168.2.1/24 is

assigned as the IP address. Port 2 and port 3 are assigned 192.168.3.1/24 and

192.168.4.1/24, respectively.)

Because this address is not part of any explicit configuration, it is removed when

you change the configuration in any way. You must configure an IP address for this

LAN port when you commit your initial configuration. (See “Step 2. Configuring Basic

Settings with J-Web Quick Configuration”on page 10 or “Step 2. Configuring Basic

Settings with the CLI”on page 13.)

J-Web Access

The Web interface to the router—called the J-Web interface—is enabled by default.

To configure the router with the Web interface, you attach a PC or laptop to a built-in

Ethernet port. The examples in this document use the first built-in Gigabit Ethernet

port 0/0 (internally named ge-0/0/0).

See “Step 1. Connecting, Logging In, and Starting the J-Web Interface”on page 9.

CLI Console Access

Services Routers are shipped with a console cable and adapter. To configure a Services

Router through the console port with the JUNOS Enhanced Services command-line

interface (CLI), you use a terminal emulation program such as Microsoft Windows

HyperTermimal. (See “Step 1. Connecting, Logging In, and Starting the

CLI”on page 12.)

Secure Context and Router Context

You can operate the router either in secure context or router context. These contexts

are meant to be starting points from which you can customize the configuration for

your network requirements. By default, the Services Router operates in secure context.

For information describing how to change contexts, see the JUNOS Enhanced Services

Administration Guide.

The basic configuration for secure context binds the ge-/0/0/0 interface to a

preconfigured zone called trust. All other interfaces are bound to a preconfigured

untrust zone. The ge-0/0/0 interface has SSH and HTTP services enabled for

management access. These services as well as Telnet, HTTPS, and DHCP are

configured as host-inbound services for the ge-0/0/0 interface. For the trust zone,

TCP Reset is also enabled. The default policy for the trust zone allows transmission

of traffic from the trust zone to the untrust zone. All traffic within the trust zone is

allowed.

What You Need To Know ■3

What You Need To Know

To protect against attacks launched from within the zone, the following screens are

enabled for the untrust zone: ICMP ping-of-death, IP source route options, IP teardrop,

TCP land attack, and TCP SYN flood. The default policy for the untrust zone denies

all traffic.

In router context, all transit traffic security checks are disabled. The default policy

allows all transit traffic, and all interfaces are bound to the trust zone.

Required Licenses

To use the following features on a Services Router, you must purchase a license. (See

“Step 4. Adding Licenses with the CLI”on page 14 or “Step 2. Configuring Basic

Settings with J-Web Quick Configuration”on page 10.)

■Advanced Border Gateway Protocol (BGP) support for route reflectors

■J-Flow traffic analysis

For these features, the presence on the router of the appropriate software license

keys (passwords) determines whether you can use the feature. You must install and

properly configure the license. The router allows you to commit a configuration with

a feature that requires a license even if the license is not present, but you are

prohibited from actually using the feature.

Slot Numbers

The J-series Services Routers have the following slots for replaceable Physical Interface

Modules (PIMs). PIM slots are numbered from top to bottom and left to right.

■J2320 Services Routers—Slots 1 through 3.

■J2350 Services Routers—Slots 1 through 5

■J4350 and J6350 Services Routers—Slots 1 through 6.

Interfaces and Ports

Interfaces are named by type, slot number, module number (always 0), and port

number. Port numbering starts with 0. For example:

■The built-in Gigabit Ethernet LAN ports 0/0 through 0/3, which are in slot 0, are

named ge-0/0/0, ge-0/0/1, ge-0/0/2, and ge-0/0/3.

■The first port on a T1 PIM in slot 1 is named t1-1/0/0.

Remote Access

Although HTTP and SSH are supported, they are disabled by default.

4■What You Need To Know

JUNOS Enhanced Services J-series™Services Router Quick Start

Before You Begin

Before installing and connecting a Services Router, read “Safety Warnings

Summary”on page 17.

Then make sure you have the equipment listed in Table 1 on page 5.

Table 1: Equipment Required for Services Router Installation

Management AccessRack InstallationElectrical Connection

For CLI access:

■Management device, such as a PC

or laptop, with a serial port (not

provided)

■RJ-45 console (Ethernet “rollover”)

cable, with an RJ-45-to-DB-9

adapter (both provided)

For J-Web access:

■Management device, such as a PC

or laptop, with an Ethernet port

(not provided)

■Ethernet cable (not provided)

■For rack installation,

mounting screws

appropriate for your rack

and an appropriate

screwdriver (not provided).

■Mounting brackets are

preinstalled on J2320 and

J2350 models, and must be

installed on J4350 and J6350

models.

■Electrostatic discharge (ESD) grounding

strap (not provided)

■For AC power, an AC power cord with a

plug appropriate for your geographical

location (provided)

■For DC power, 14 AWG DC power cables

with appropriate lugs (not provided)

■For grounding, 14 AWG grounding cable

and lug for the router (not provided)

■Routers with redundant power supplies

require an AC power cord (provided) or DC

power cables (not provided) for each power

supply.

CAUTION: A licensed electrician must attach a cable lug to the grounding and power

cables that you supply. A cable with an incorrectly attached lug can damage the

router.

If you are installing a J4350 or J6350 Services Router, take the following steps:

1. Attach the air filter and filter cover, as shown in Figure 1 on page 5.

Figure 1: Attaching Air Filter and Filter Cover

Before You Begin ■5

Before You Begin

2. Attach the mounting brackets to either the center or front of the chassis, as

shown in Figure 2 on page 6.

Figure 2: Attaching Mounting Brackets

Installing a Services Router

WARNING: DC-powered Services Routers are intended for installation in a restricted

access location.

Installing J2320 and J2350 Services Routers

To install the J2320 and J2350 router into a rack:

1. Have one person grasp the sides of the router, lift the router, and position it in

the rack.

2. Align the top hole in each mounting bracket with a hole in each rack rail as shown

in Figure 3 on page 6 and Figure 4 on page 7, making sure the chassis is level.

Figure 3: Hanging a J2320 Router in a Rack

6■Installing a Services Router

JUNOS Enhanced Services J-series™Services Router Quick Start

Figure 4: Hanging a J2350 Router in a Rack

3. Have a second person install a mounting screw into each of the two aligned

holes. With a number 2 Phillips screwdriver, tighten the screws.

4. Verify that the mounting screw on one side of the rack is aligned with the

mounting screw on the opposite side and that the router is level.

5. Install the second screw in each mounting bracket.

Installing J4350 or J6350 Services Routers

To install a J4350 or J6350 Services Router in a rack:

1. Make sure the rack is properly secured to the building in its permanent location.

2. Attach a screw to each rack rail in the third hole down from where you want the

top of the router to be positioned, as shown in Figure 5 on page 8. Screw only

part way in, leaving about 1/4 in. (6 mm) distance between the screw head and

the rail.

3. Lift the router and insert the elliptical openings in the mounting brackets onto

the partially inserted screws so that the router is hanging from the two screws.

Installing a Services Router ■7

Installing a Services Router

Figure 5: Hanging the Router in the Rack

4. Install at least two mounting screws into each mounting bracket, in addition to

the center screws from which the router hangs.

Connecting Power to a Services Router

J2320, J2350, and J4350 Services Routers have a fixed power supply. J6350 Services

Routers have field-replaceable AC or DC power supplies.

To connect AC or DC power:

1. Connect the router to earth ground with a 14 AWG grounding cable:

a. Connect one end to a proper earth ground point (the rack, for example).

b. Remove the screw and washer from the PEM nut on the protective earthing

terminal at the rear of the router chassis. (The J4350 and J6350 chassis have

two PEM nuts.)

c. Secure the other end of the cable to this grounding point with the washer

and then with the screw.

2. For an AC power supply only:

a. Insert the appliance coupler end of the power cord into the appliance inlet

on the router's power supply faceplate.

b. Insert the plug into an AC power source receptacle.

8■Connecting Power to a Services Router

JUNOS Enhanced Services J-series™Services Router Quick Start

c. If the power supply includes a on/off switch, turn the switch to on.

3. For a DC power supply only:

a. Ensure that the voltage across the DC power source cable leads is 0 volts

and that the cable leads cannot become active during installation.

b. Remove the clear plastic cover protecting the terminal block.

c. Remove the two center screws next to the labels –48 VDC and RTN.

d. Secure the positive (+) DC source power cable lug to the RTN terminal,

tightening the screw only until snug. Do not overtighten.

e. Secure the negative (–) DC source power cable lug to the –48 VDC terminal,

tightening the screw only until snug. Do not overtighten.

f. Replace the plastic cover.

4. Repeat Step 2 or Step 3 for the second power supply, if one is installed.

For complete instructions, see the JUNOS Enhanced Services J-series Services Router

Getting Started Guide.

Basic Connection and Configuration with the J-Web Interface

For J-Web access, you connect from your management PC or laptop to the Services

Router through one of the built-in Ethernet interfaces. The examples in this document

use port 0/0. (For information about the J-Web interface, see “J-Web

Basics”on page 15.)

Step 1. Connecting, Logging In, and Starting the J-Web Interface

When the Services Router is powered on for the first time, it searches for a DHCP

server, and if it does not find one, it assigns an IP address within the 192.168.1.0/24

subnetwork to any devices connected to it.

To connect to the J-Web interface through port 0/0 on the router:

1. On the management device, such as a PC or laptop, you use to access the J-Web

interface, verify that the address of the port that you connect to the router is set

to one of the following:

■An Ethernet address on the 192.168.1/24 subnetwork other than

192.168.1.1

■An Ethernet address from a DHCP server

2. Turn off the power to the management device.

3. Plug one end of the Ethernet cable into the Ethernet port on the management

device.

4. Connect the other end of the Ethernet cable to the built-in Ethernet port on the

router.

Basic Connection and Configuration with the J-Web Interface ■9

Basic Connection and Configuration with the J-Web Interface

5. Power on the router by pressing the power button on the front panel.

6. Wait until the STATUS LED on the front panel turns solid green.

7. Turn on the power to the management device. The router assigns an IP address

to the management device within the 192.168.1/24 subnetwork if the device

is configured to use DHCP.

8. From the management device, open a Web browser and enter the IP address

192.168.1.1 in the address field. The Set Up Quick Configuration page appears.

NOTE: You must manually configure the IP address for the management port you

are using before you save your initial configuration. When you save the configuration

for the first time, the DHCP lease is lost and you will lose the connection to the router

if you have not manually configured the IP address. If you lose connection through

the management interface, you must connect through the console port.

Step 2. Configuring Basic Settings with J-Web Quick Configuration

When you click OK or Apply on J-Web Quick Configuration pages, the configuration

is saved and activated automatically. To configure basic settings with the J-Web

interface:

1. If the Set Up Quick Configuration page is not displayed, select

Configuration>Quick Configuration >Set Up.

2. Enter information in the boxes on the Set Up Quick Configuration page as shown

in Table 2 on page 10, then click OK or Apply.

Table 2: J-Web Set Up Quick Configuration

DescriptionField

Hostname of the router—for example, Chicago.

Host Name (required)

Network or subnetwork that the router belongs to.Domain Name

Root password that user “root”can use to log in to the router.Root Password (required)

Retyped password.Verify Root Password (required)

Time zone in which the router is located.Time Zone

NTP server to synchronize the system time.NTP Servers

Your current time and date.Current System Time

DNS server to resolve hostnames into addresses.DNS Name Servers

Name of each domain to include in a DNS search.Domain Search

Default route. The IP address of a default router that the Services Router can use

to direct packets addressed to networks not explicitly listed in the routing table.

Default Gateway

10 ■Basic Connection and Configuration with the J-Web Interface

JUNOS Enhanced Services J-series™Services Router Quick Start

Ce manuel convient aux modèles suivants

Table des matières

Autres manuels Juniper Routeur réseau

Juniper

Juniper ACX7100-32C Instructions d'installation

Juniper

Juniper EX9200 Series Fiche technique

Juniper

Juniper PTX Series Manuel utilisateur

Juniper

Juniper ACX2200 Manuel utilisateur

Juniper

Juniper M10i Instructions d'installation

Juniper

Juniper PTX10008 Manuel utilisateur

Juniper

Juniper T320 Manuel utilisateur

Juniper

Juniper MX2020 Instructions d'installation

Juniper

Juniper PTX10003-80C Instructions d'installation

Juniper

Juniper MX960 Manuel utilisateur

Juniper

Juniper Internet Router M160 Instructions d'installation

Juniper

Juniper QFX5100 Instructions d'installation

Juniper

Juniper EX3400 Fiche technique

Juniper

Juniper M40e Instructions d'installation

Juniper

Juniper QFX10016 Instructions d'installation

Juniper

Juniper ACX2000 Manuel utilisateur

Juniper

Juniper J2320 Manuel utilisateur

Juniper

Juniper M7i Manuel utilisateur

Juniper

Juniper T640 Instructions d'installation

Juniper

Juniper MX204 Instructions d'installation

Juniper

Juniper JRR200 Instructions d'installation

Juniper

Juniper J-Series Mode d’emploi

Juniper

Juniper ERX - RELEASE 11.1.X MODULE GUIDE 4-6-2010 Manuel utilisateur

Juniper

Juniper EX4600 Manuel utilisateur

Manuels Routeur réseau populaires d'autres marques

Allnet

Allnet ALL0333AU Manuel utilisateur

HomeSeer

HomeSeer HT-SEL Manuel utilisateur

Sercomm

Sercomm Genesis OC3505D Manuel utilisateur

Billion

Billion BIPAC 5102 Series Manuel utilisateur

TP-Link

TP-Link TD-8817 Manuel utilisateur

Motorola

Motorola MR1900 Manuel utilisateur

Digi

Digi IX14 Manuel utilisateur

Cisco

Cisco NCS 540 Manuel

XAVi

XAVi X8821e Manuel utilisateur

BEC

BEC 6200WZL Manuel utilisateur

MikroTik

MikroTik hAP ac3 Series Manuel utilisateur

Korenix

Korenix JetNet 5428G Series Manuel utilisateur

NETGEAR

NETGEAR FS526T - Switch Manuel utilisateur

Korenix

Korenix JetNet 5710G Series Manuel utilisateur

Automated Logic

Automated Logic ZN551 Manuel du propriétaire

Cisco

Cisco ASR 1000 Series Manuel de l'opérateur

EnGenius

EnGenius ESR-9710 Manuel utilisateur

Cisco

Cisco 805 Series Instructions d'utilisation et de sécurité