Juniper SRX210 Quick Start Manual page 2

Source NAT rules must be set.
The device has the following default configuration set when you power it on for the first
time. To be able to use the device, you do not need to perform any initial configuration.
Factory-Default Settings:
Port Label Interface Security
Zones
0/0 ge-0/0/0 untrust
0/1 and 0/2 ge-0/0/1 and trust
to 0/7 fe-0/0/2 to
fe-0/0/7
Factory-Default Settings for Security Policies:
Source Zone Destination Zone
trust untrust
trust trust
untrust trust
Factory-Default Settings for NAT Rule:
Source Zone Destination Zone
trust untrust
Task 2: Connect the Power Cable and a Power Source
Connect the power cable to the device and a power source. We recommend using a
surge protector. Note the following indications:
POWER LED (green): The device is receiving power.
STATUS LED (green): The device is operating normally.
ALARM LED (amber): The device is operating normally, and may glow amber as a
rescue configuration has not been set. This is not a panic condition.
mPIM LED (off): The Mini-Physical Interface Module (Mini-PIM) is not present or is
not detected by the device. If this LED is green and steadily on, it indicates that the
Mini-PIM is functioning normally.
NOTE: After a rescue configuration has been set, an amber ALARM LED indicates a
minor alarm, and a solid red ALARM LED indicates a major problem on the services
gateway.
NOTE: You must allow the device between 5 and 7 minutes to boot up after you power it
on. Wait until the STATUS LED is solid green before proceeding to the next task.
Task 3: Connect the Management Device
Connect the management device to the services gateway using either of the following
methods:
Connect an RJ-45 cable (Ethernet cable) from one of the following ports on the front
panel to the Ethernet port on the management device (workstation or laptop):
0/1 (interface ge-0/0/1)
0/2 through 0/7 (interfaces fe-0/0/2 through fe-0/0/7)
DHCP State IP Address
client unassigned
server 192.168.1.1/24
Policy Action
permit
permit
deny
Policy Action
source NAT to untrust zone
interface
We recommend this connection method. If you are using this method to connect,
proceed with Task 4.
Connect an RJ-45 cable (Ethernet cable) from the port labeled CONSOLE to the
supplied DB-9 adapter, which then connects to the serial port on the management
device. (Serial port settings: 9600 8-N-1.)
If you are using this method to connect, proceed with the CLI configuration
instructions in the Branch SRX Series Services Gateways Golden Configurations at
www.juniper.net/us/en/local/pdf/app-notes/3500153-en.pdf.
See the illustration below for details on connecting a management interface.
Task 4: Ensure That the Management Device Acquires an IP Address
After you connect the management device to the services gateway, the DHCP server
process on the services gateway will assign an IP address automatically to the
management device. Ensure that the management device acquires an IP address on the
192.168.1.0/24 subnetwork (other than 192.168.1.1) from the device.
NOTE: The services gateway functions as a DHCP server and will assign an IP address
to the management device.
NOTE: If an IP address is not assigned to the management device, manually configure
an IP address in the 192.168.1.0/24 subnetwork. Do not assign the 192.168.1.1 IP
address to the management device, as this IP address is assigned to the services
gateway. By default, the DHCP server is enabled on the L3 VLAN interface, (IRB) vlan.0
(ge-0/0/1 and fe-0/0/2 to fe-0/0/7), which is configured with an IP address of
192.168.1.1/24.
NOTE: When an SRX210 Services Gateway is powered on for the first time, it boots
using the factory default configuration.
Task 5: Ensure That an IP Address Is Assigned to the Services Gateway
Use one of the following methods to obtain an IP address on the services gateway:
Page 2