The services gateway is shipped with the JUNOS software preinstalled and ready to be configured when the device is powered on. There are three copies of the software: one on a CompactFlash card (if installed) in the Routing Engine, one on the hard disk in the Routing Engine, and one on a USB flash drive that can be inserted into the slot in the Routing Engine faceplate.
When the device boots, it first attempts to start the image on the USB flash drive. If a USB flash drive is not inserted into the Routing Engine or the attempt otherwise fails, the device next tries the CompactFlash card (if installed), and finally the hard disk.
You configure the services gateway by issuing JUNOS command-line interface (CLI) commands, either on a console device attached to the CONSOLE port on the Routing Engine, or over a telnet connection to a network connected to the ETHERNET port on the Routing Engine.
Gather the following information before configuring the device:
This procedure connects the device to the network but does not enable it to forward traffic. For complete information about enabling the device to forward traffic, including examples, see the appropriate JUNOS software configuration guides.
To configure the software:
admin@# show## Last changed: 2008-05-07 22:43:25 UTC
version "9.2I0 [builder]";
system {
autoinstallation;
host-name henbert;
root-authentication {
encrypted-password "$1$oTVn2KY3$uQe4xzQCxpR2j7sKuV.Pa0"; ## SECRET-DATA
}
login {
user admin {
uid 928;
class super-user;
authentication {
encrypted-password "$1$cdOPmACd$QvreBsJkNR1EF0uurTBkE."; ## SECRET-DATA
}
}
}
services {
ssh;
web-management {
http {
interface ge-0/0/0.0;
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any any;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
license {
autoupdate {
url https://ae1.juniper.net/junos/key_retrieval;
}
}
}
interfaces {
ge-0/0/0 {
unit 0;
}
ge-6/2/0 {
unit 0 {
family inet {
address 5.1.1.1/24;
}
}
}
ge-6/3/5 {
unit 0 {
family inet {
address 192.1.1.1/24;
}
}
}
fxp0 {
unit 0 {
family inet {
address 192.168.10.2/24;
}
}
}
}
routing-options {
static {
route 0.0.0.0/0 next-hop 5.1.1.2;
}
}
security {
zones {
security-zone trust {
interfaces {
ge-6/3/5.0;
}
}
security-zone untrust {
interfaces {
ge-6/2/0.0;
}
}
}
policies {
from-zone trust to-zone untrust {
policy bob {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
}
}