Juniper SRX220 Quick Start

SRX220 Services Gateway Quick Start
Use the instructions in this quick start to help you connect the SRX220 Services
Gateway to your network. For details, see the SRX220 Services Gateway Hardware
Guide at http://www.juniper.net/techpubs/a061.html.
SRX220 Services Gateway Front Panel
2 3 4 5 6
Callout Description
1 Mini-PIM slot 1 and Mini-PIM slot 2 5
2 Power button
3 LEDs: STATUS, ALARM, POWER,
HA, MPIM-1, MPIM-2
4 Reset Config button
SRX220 Services Gateway Back Panel
Callout Description
1 Cable tie holder
2 Grounding point
1 1
7 8
Callout Description
Universal Serial Bus (USB) ports
6 Console port
7 Gigabit Ethernet (0/0 through 0/7) ports
8 CompactFlash card slot
1 1 1
3
Callout Description
3 Power supply point
4 Lock slot for security cable

SRX220 Services Gateway Models

The following two models of SRX220 Services Gateways are available:
Device Power over Ethernet
SRX220H Not supported
SRX220H-POE 120 watts supported across eight ports (0/0 through 0/7)

Connecting and Configuring the SRX220 Services Gateway

Use the instructions below to connect and set up the SRX220 Services Gateway to
protect your network. Refer to the LEDs on the front panel of the device to help you
determine the status of the device.

Overview

The SRX220 Services Gateway is a secure routing device that requires these basic
configuration settings to function properly:
Interfaces must be assigned IP addresses.
n
Interfaces must be bound to zones.
n
Policies must be configured between zones to permit/deny traffic.
n
Source NAT rules must be set.
n
The device has the following default configuration set when you power it on for the first
2
time. To be able to use the device, you do not need to perform any initial configuration.
Factory-Default Settings:
Port Label Interface
0/0 ge-0/0/0
0/1 to 0/7 ge-0/0/1 through
4
ge-0/0/7
Factory-Default Settings for Security Policies:
Source Zone Destination Zone
t u r t s u t n u r t s
trust trust
u t n u r t s t u r t s
Factory-Default Settings for NAT Rule:
Source Zone Destination Zone
t u r t s u t n u r t s
Security Zone DHCP State IP Address
untrust client unassigned
trust server 192.168.1.1/24
Policy Action
p r e m t i
permit
d e n y
Policy Action
s o u c r e N A T o t u t n u r t s z o n e i t n r e a f c e