Juniper SRX650 Getting Started Manual

SRX650 Services Gateway
Use the instructions in this guide to help you connect the SRX650 Services Gateway to your network. For details, see the
SRX650 Services Gateway Hardware Guide at http://www.juniper.net/techpubs/a065.html.
Front Panel
2 4
3
1 5
8
9
10 11
1. Mounting brackets 4.
2. ALARM LED 5.
3. FAN LED 6.
Back Panel
1
DC OK AC OK SRE 6
Services and Routing Engine 6
OFFLINE RESET
CONFIG
6

PART 1 - CONNECTING AND CONFIGURING THE DEVICE

Use the instructions below to connect and set up the SRX650 Services Gateway to protect your network. Refer to the
LEDs on the front and back panels of the device to help you determine the status of the device.

Overview:

The SRX650 Services Gateway is a security device that requires these
basic configuration settings to function properly.
• Interfaces must be assigned IP addresses.
• Interfaces must be bound to zones.
• Policies must be configured between zones to permit/deny traffic.
• Source NAT rules must be set.
Factory-default settings:
Interface Security Zone
ge-0/0/0 untrust
ge-0/0/1 trust
ge-0/0/2 trust
ge-0/0/3 trust
Security policies:
Source Zone Destination Zone
trust untrust
trust trust
untrust trust
NAT rule:
Source Zone Destination Zone
trust untrust
6
12
SRE/ACE LED 1.0
ESD outlet
10/100/1000 Ethernet ports
3
2
CF ACT
ALARM POWER STATUS HA
SRE COMPACT FLASH
AUX CONSOLE
8 9 10
7
DHCP State IP Address
client 0.0.0.0
server 192.168.1.1/24
server 192.168.2.1/24
server 192.168.3.1/24
Policy Action
permit
permit
deny
Policy Action
source NAT to untrust zone interface
7
7. GPIM/XPIM slots 10. SRE/ACE LED 0 (Applies to SRE modules only)
8. POWER LED 11. SRE/ACE LED 1.1
9. HA SYS LED 12. Power button
1.
5
2.
4
3.
4.
USB 0 USB 1
5.
11

Step 1

Connect the power cable to the device and a power source. We
recommend using a surge protector. Note the following indications:
• POWER LEDs (solid green) on front and back panels: The device
is receiving power.
• STATUS LED (solid green) on back panel: The device is
operating normally.
• ALARM LED (amber) on front panel: The device is operating
normally in the absence of rescue configuration. This is not a panic
condition.
Note: A solid red ALARM LED indicates a major problem exists on the
services gateway.
Important: You must allow the services gateway between five and seven
minutes to boot up after you have powered it on. Please wait until the
STATUS LED is solid green before proceeding to the next step.

Step 2

Connect the management device to the services gateway using either of
the following methods:
• Connect an Ethernet cable from the ge-0/0/1 port to the Ethernet
port on the management device (workstation or laptop). We
recommend this connection method.
If you are using this method, proceed with Step 3.
Getting Started Guide
Power supply slots 6. Reset Config
Multi-use processing 7. SRE LEDs
slot
8. AUX port
Services and Routing
9. Console port
Engine (SRE) slot 0
10. External CompactFlash
(shown with SRE module
slot
installed)
11. USB ports (2 each)
Fan tray
Air filter
(behind fan tray)