Initial Configuration on NFX350 Devices
Factory Default Settings
The NFX350 is shipped with the following factory default settings:
Table 1: Security Policies
Source Zone | Destination Zone | Policy Action |
---|---|---|
trust | trust | permit |
trust | untrust | permit |
Table 2: Interfaces
Port Label | Interface | Security Zone | DHCP State | IP Address |
---|---|---|---|---|
0/0 to 0/7 | ge-0/0/0 to ge-0/0/7 | trust | server | 192.168.2.1/24 |
0/8 to 0/15 | xe-0/0/8 to xe-0/0/15 | trust | client | ISP assigned |
MGMT | fxp0 | N/A | N/A | 192.168.1.1/24 |
The device is shipped with the following services enabled in the default security policy: DHCP, HTTP, HTTPS, and SSH.
To provide secure traffic, a basic set of screens are configured on the untrust zone.
Enabling Basic Connectivity
- Ensure that the device is powered on.
- Connect to the console port:
- Plug one end of the Ethernet cable into the console port on your device.
- Connect the other end of the Ethernet cable to the RJ-45 to DB-9 serial port adapter shipped with your device.
- Connect the RJ-45 to DB-9 serial port adapter to the serial
port on the management device. Use the following values to configure
the serial port:
Bits per second—9600; Parity—None; Data bits—8; Stop bits—1; Flow control—None.
Note Alternately, you can use the USB cable to connect to the mini-USB console port on the device. To use the mini-USB console port, you must download the USB driver from the following page and install the driver on the management device:
- Use any terminal emulation program such as HyperTerminal to connect to the device console. The CLI displays a login prompt.
- Log in as root. If the software
completes booting before you connect to the console, you might need
to press the Enter key for the prompt to appear.
login: root
- Start the CLI.
root@:~ # cli
root@>
- Enter configuration mode.
root@> configure
[edit]
root@#
- Change the password for the root administration user account.
[edit]
root@# set system root-authentication plain-text-password
New password: password
Retype new password: password
- Enable SSH service for the root user.
[edit]
root@# set system services ssh root-login allow
- (Optional) Enable Internet connection for the devices
connected on LAN by setting the DNS IP.
[edit]
root@# set access address-assignment pool junosDHCPPool family inet dhcp-attributes name-server dns-server-ip
- Commit the configuration.
[edit]
root@# commit
Establishing the Connection
- Connect the device to the ISP by connecting one of the
WAN ports (0/8 and 0/15) to the ISP. The device is assigned an IP
address by the ISP through DHCP.
Note For information about NFX350 interfaces, see Table 2.
- Connect the laptop to one of the front panel LAN ports (0/0 to 0/7). The laptop is assigned an IP address by the DHCP server running on the device.
- Open a browser window on your laptop, navigate to https://www.juniper.net, and verify your connectivity.