Juniper SRX220 Quick Start Manual

SRX220 Services Gateway Quick Start
Use the instructions in this quick start to help you connect the SRX220 Services
Gateway to your network. For details, see the SRX220 Services Gateway Hardware
Guide at
http://www.juniper.net/techpubs/en_US/release-independent/junos/information-products/
pathway-pages/srx-series/product/index.html.
SRX220 Services Gateway Front Panel
Callout Description
1 Mini-PIM slot 1 and Mini-PIM slot 2 5
2 Power button
3 LEDs: STATUS, ALARM,
POWER, HA, MPIM-1, MPIM-2
4 RESET CONFIG button
SRX220 Services Gateway Back Panel
Callout Description
1 Cable tie holder
2 Grounding point
Callout Description
USB ports
6 Console port
7 Gigabit Ethernet (0/0 through 0/7) ports
8 CompactFlash card slot
Callout Description
3 Power supply point
4 Lock slot for security cable
SRX220 Services Gateway Models
The following two models of SRX220 Services Gateways are available:
Device DDR Memory
SRX220H2 2 GB
SRX220H2-POE 2 GB
Connecting and Configuring the SRX220 Services Gateway
Use the instructions below to connect and set up the SRX220 Services Gateway to
protect your network. Refer to the LEDs on the front panel of the device to help you
determine the status of the device.
Overview
The SRX220 Services Gateway requires these basic configuration settings to function
properly:
Interfaces must be assigned IP addresses.
Interfaces must be bound to zones.
Policies must be configured between zones to permit or deny traffic.
Source NAT rules must be set.
The device has the following default configuration set when you power it on for the first
time. To use the device, you do not need to perform any initial configuration.
Factory-Default Settings:
Port Label Interface
0/0 ge-0/0/0
0/1 to 0/7 ge-0/0/1 through
ge-0/0/7
Factory-Default Settings for Security Policies:
Source Zone Destination Zone
trust untrust
trust trust
untrust trust
Factory-Default Settings for NAT Rules:
Source Zone Destination Zone
trust untrust
CompactFlash Memory
2 GB
2 GB
Security Zone DHCP State IP Address
untrust client unassigned
trust server 192.168.1.1/24
Policy Action
permit
permit
deny
Policy Action
source NAT to untrust zone interface