Juniper Networks SRX110 User Manual

SRX110 Services Gateway Quick Start

g033602

13

4

2

56 87

g033604

13

4

2

56 87

g033603

1 34

2 5

6 7

Use the instructions in this quick start to help you connect the SRX110 Services Gateway
to your network. For details, see the SRX110 Services Gateway Hardware Guide at
http://www.juniper.net/techpubs/en_US/release-independent/junos/information-products
/pathway-pages/srx-series/product/index.html.

SRX110 Services Gateway Front Panel

SRX110 Services Gateway (SRX110H2-VA) Front Panel

SRX110 Services Gateway (SRX110H2-VB) Front Panel

SRX110 Services Gateway Back Panel

SRX110 Services Gateway (SRX110H2-VA and SRX110H2-VB) Back Panel

Callout Description Callout Description

1 Cable tie holder 5 CompactFlash card

2 3G-WAN (USB port) 6 Power supply point

3 Lock 7 Cable tie holder

4 Grounding point

NOTE: If you experience a problem with the CompactFlash card, you must return the
services gateway for repair or replacement. To do this, contact Juniper Networks
Technical Assistance Center (JTAC).

SRX110 Services Gateway Models

The following models of SRX110 Services Gateways are available:

Device DDR Memory CompactFlash Memory

SRX110H2-VA 2 GB 2 GB

SRX110H2-VB 2 GB 2 GB

Callout Description Callout Description

1 Power button 5 Console port

2 LEDs: ALARM, STATUS,

3 USB port 7 LEDs: SYNC and TX/RX

4 Fast Ethernet ports 8  For SRX110H2-VA—VDSL/ADSL-POTS

POWER, 3G

6 RESET CONFIG button

 For SRX110H2-VB—VDSL/ADSL-ISDN

Connecting and Configuring the SRX Series Device

Use the instructions below to connect and set up the SRX110 Services Gateway to
protect your network. Refer to the LEDs on the front of the device to help you determine
the status of the device.

Overview

The services gateway requires these basic configuration settings to function properly:

 All interfaces must be assigned IP addresses, bound to zones, and configured as

Layer 3 interfaces.

 Policies must be configured between zones to permit or deny traffic.

 Source NAT rules must be set.

The device has the following default configuration set when you power it on for the first

g033619

time. You can use the device without performing any initial configuration.

Factory-Default Settings:

Port Label Interface Security Zone DHCP State IP Address

0/0 fe-0/0/0 untrust client unassigned

0/1 to 0/7 fe-0/0/1 to

VDSL/ADSL-POTS

or

VDSL/ADSL-ISDN

fe-0/0/7

pt-1/0/0 untrust client unassigned

trust server 192.168.1.1/24

Factory-Default Settings for Security Policies:

Source Zone Destination Zone Policy Action

trust untrust permit

trust trust permit

untrust trust deny

Factory-Default Settings for NAT Rules:

Source Zone Destination Zone Policy Action

trust untrust source NAT to untrust zone

interface

Task 1: Connect the Power Cable and a Power Source

Connect the power cable to the device and a power source. We recommend using a
surge protector. Note the following indications:

 POWER LED (green): The device is receiving power.

 STATUS LED (green): The device is operating normally.

 ALARM LED (amber): The device is operating normally, although the LED might be

amber because a rescue configuration has not been set yet. This is not a panic
condition.

NOTE: After a rescue configuration has been set, an amber ALARM LED indicates a
minor alarm, and a solid red ALARM LED indicates a major problem on the services
gateway.



You must allow the device between five and seven minutes to boot up after you power
i

t on. Wait until the STATUS LED is solid green before proceeding to the next task.

Task 2: Connect the Management Device

Connect the management device to the services gateway using either of the following
methods:

 Connect an an RJ-45 cable (Ethernet cable) from any one port between the ports

labeled 0/1 and 0/7 (interfaces fe-0/0/1 through fe-0/0/7) on the front panel to the
Ethernet port on the management device (workstation or laptop).
We recommend this connection method. If you are using this method to connect,
proceed to Task 3.

 Connect an RJ-45 cable (Ethernet cable) from the port labeled CONSOLE on the

front panel to the supplied DB-9 adapter, which then connects to the serial port on
the management device (Serial port settings: 9600 8-N-1-N).

If you are using this method to connect, proceed with the CLI configuration
instructions available in the Getting Started Guide for the Branch SRX Series at
http://www.juniper.net/techpubs/en_US/release-independent/junos/
information-products/pathway-pages/srx-series/product/index.html.

See the following illustration for details about connecting a management interface by
using the Ethernet ports.

Task 3: Ensure That the Management Device Acquires an IP Address

After you connect the management device to the services gateway, the DHCP server
process on the services gateway automatically assigns an IP address to the
management device. Ensure that the management device acquires an IP address on the

192.168.1.0/24 subnetwork (other than 192.168.1.1) from the device.

NOTE:

 If an IP address is not assigned to the management device, manually configure an

IP address in the 192.168.1.0/24 subnetwork. Do not assign 192.168.1.1 as the IP
address to the management device, as this IP address is assigned to the services
gateway. By default, the DHCP server is enabled on the Layer 3 VLAN interface,
(IRB) vlan.0 (fe-0/0/1 to fe-0/0/7), which is configured with the IP address

192.168.1.1/24.

 When an SRX110 Services Gateway is powered on for the first time, it boots using

the factory-default configuration.

Page 2