Understanding Management Access; Performing Initial Software Configuration On The Srx210 Services Gateway - Juniper SRX210 - HARDWARE GUIDE REV 3 Hardware Manual

Understanding Management Access

Copyright © 2010, Juniper Networks, Inc.
Chapter 16: Performing Initial Software Configuration on the SRX210 Services Gateway
Table 38 on page 99 shows the mapping of the chassis cluster ports.
Table 38: Mapping the Chassis Cluster Ports on an SRX210 Services
Gateway
Ethernet Ports on SRX210 Services Gateway
fe-0/0/6
fe-0/0/7
Junos OS automatically creates the fxp0 and fxp1 interfaces on these ports when the
SRX210 Services Gateway is operating in chassis cluster mode.
For more information, see the following guides:
Junos OS Interfaces and Routing Configuration Guide
Junos OS Security Configuration Guide
Telnet allows you to connect to the services gateway and access the CLI to execute
commands from a remote system. The Telnet CLI connections are not encrypted and
therefore can be intercepted.
NOTE: Telnet access to the root user is prohibited. You must use more secure
methods, such as SSH, to log in as
SSH provides the following features:
Allows you to connect to the device and access the CLI to execute commands from a
remote system
Encrypts traffic so that it cannot be intercepted (unlike Telnet)
Can be configured so that connections are authenticated by a digital certificate
Uses public–private key technology for both connection and authentication
The SSH client software must be installed on the machine where the client application
runs. If the SSH private key is encrypted (for greater security), the SSH client must be
able to access the passphrase used to decrypt the key.
For information about obtaining SSH software, see
.
http://www.openssh.com
If you are using a Junos XML protocol server to configure and monitor devices, you can
activate cleartext access on the device to allow unencrypted text to be sent directly over
a Transmission Line Protocol (TCP) connection without using any additional protocol
(such as SSH, SSL, or Telnet). For more information about the Junos XML management
protocol, see the Junos XML Management Protocol Guide.
Management Interface
fxp0 (management port)
fxp1 (control port)
root .
http://www.ssh.com
and
99