Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring cSRX Using the CLI

    To configure the cSRX container using the CLI:

    1. Log in to the cSRX container using SSH.
      root@csrx-ubuntu3:~/csrx#ssh 192.168.42.81
    2. Start the CLI as root user.

      Note: When a cSRX container is launched, if you specified to log into the cSRX container with an initial root password, access to the cSRX container using SSH will be enforced with user name and password.

      root#cli
      root@>
    3. Verify the interfaces.

      root@> show interfaces

      Physical interface: ge-0/0/1, Enabled, Physical link is Up
        Interface index: 100
        Link-level type: Ethernet, MTU: 1514
        Current address: 02:42:ac:13:00:02, Hardware address: 02:42:ac:13:00:02
      Physical interface: ge-0/0/0, Enabled, Physical link is Up
        Interface index: 200
        Link-level type: Ethernet, MTU: 1514
        Current address: 02:42:ac:14:00:02, Hardware address: 02:42:ac:14:00:02
      
    4. Enter configuration mode.
      configure
      [edit]
      root@#
    5. Set the root authentication password by entering a cleartext password, an encrypted password, or an SSH public key string (DSA or RSA).
      [edit]
      root@# set system root-authentication plain-text-password
      New password: password
      Retype new password: password
    6. Configure the hostname.
      [edit]
      root@# set system host-name host-name
    7. Configure the two traffic interfaces.

      Note: Docker automatically connects the fxp0 management interface (eth0) to the Linux bridge and automatically assigns an IP address. If is not necessary for you to configure the management interface for the cSRX container.

      [edit]
      root@# set interfaces ge-0/0/0 unit 0 family inet address 192.168.20.2/24
      root@# set interfaces ge-0/0/1 unit 0 family inet address 192.168.10.2/24
    8. Configure basic security zones for the public and private interfaces and bind them to traffic interfaces.
      [edit]
      root@# set security zones security-zone untrust interfaces ge-0/0/0.0
      root@# set security zones security-zone trust interfaces ge-0/0/1.0
      root@# set security policies default-policy permit-all
    9. Verify the configuration.
      [edit]
      root@# commit check
      configuration check succeeds
    10. Commit the configuration to activate it on the cSRX instance.
      [edit]
      root@# commit
      commit complete
    11. (Optional) Use the show command to display the configuration to verify that it is correct.

    Modified: 2018-01-29