Juniper SRX240 Hardware Manual page 113

Copyright © 2015, Juniper Networks, Inc.
Configure an administrator account on the services gateway:
6.
[edit]
root@# set system login user admin class super-user authentication
plain-text-password
Commit the configuration to activate it on the services gateway:
7.
[edit]
root@# commit
Log in as the administrative user you configured in Step 6.
8.
Configure the name of the services gateway. If the name includes spaces, enclose the
9.
name in quotation marks (" ") :
configure
[edit]
admin@# set system host-name host-name
Configure the traffic interface:
10.
[edit]
admin@# set interfaces ge-0/0/1 unit 0 family inet address address/prefix-length
Configure the default route:
11.
[edit]
admin@# set routing-options static route 0.0.0.0/0 next-hop gateway
Configure basic security zones and bind them to traffic interfaces:
12.
[edit]
admin@# set security zones security-zone untrust interfaces ge-0/0/1
Configure basic security policies:
13.
[edit]
admin@# set security policies from-zone trust to-zone untrust policy policy-name
match source-address any destination-address any application any
admin@# set security policies from-zone trust to-zone untrust policy policy-name
then permit
Create a NAT rule for source translation of all Internet-bound traffic:
14.
[edit]
admin@# set security nat source rule-set interface-nat from zone trust
admin@# set security nat source rule-set interface-nat to zone untrust
admin@# set security nat source rule-set interface-nat rule rule1 match source-address
0.0.0.0/0 destination-address 0.0.0.0/0
admin@# set security nat source rule-set interface-nat rule rule1 then source-nat
interface
Check the configuration for validity:
15.
[edit]
admin@# commit check
configuration check succeeds
Chapter 15: Performing Initial Configuration
95