Start J-Web

Hostname

Enter a hostname.

You can use alphanumeric characters, special characters such as the underscore (_), the hyphen (-), or the period (.); the maximum length is 255 characters.

Password

Enter a password.

You can use alphanumeric characters and special characters; the minimum length is six characters.

User Management

You can create additional user accounts in addition to root user account.

Note: We recommend that you do not use root user account as a best practise to manage your devices.

Procedure

1. Click +.
2. Enter the details in the following fields:

   • Username—Enter a username. Do not use space or symbols.

   • Password—Enter a password.

     You can use alphanumeric characters and special characters; the minimum length is six characters.

   • Confirm Password—Reenter the password.

   • Role—Select a role from the list.

     Available options are: Super User, Operator, Read-Only, and Unauthorized.

3. Click the tick mark.

You can edit the user details using the pencil icon or select the existing user and delete it using the delete icon.

Date and Time

Select the date and time (in DD-MM-YYYY and HH:MM:SS 24-hour or AM/PM formats) to configure the system time manually.

Time zone

Select an option from the list. By default, device current time (UTC) is selected.

DNS Server 1

By default, 8.8.8.8 is displayed.

Note: Entering a new IP address for the DNS server will remove the default IP address.

Note: If you change the management IP address and click Next, a warning message appears on the Management Interface page that you need to use the new management IP address to log in to J-Web because you may lose the connectivity to J-Web.

Management Port

Select an option from the list.

If fxp0 port is your device’s management port, then the fxp0 port is displayed. You can change it as required or you can select None and proceed to the next page.

Note:

• You can choose the revenue port as management port if your device does not support the fxp0 port. Revenue ports are all ports except fxp0 and em0.

• If you are in Tap mode, it is mandatory to configure a management port. J-Web needs a management port for viewing generated report.

Note: Click Email it to self to get the newly configured IPv4 address to your inbox. This is useful if you lose connectivity when you change the management IP address to another network.

Management Address

Enter a valid IPv4 address for the management interface.

Note: If fxp0 port is your device’s management port, then the fxp0 port’s default IP address is displayed. You can change it if required.

Static Route

Enter an IPv4 address for the static route to route to the other network devices.

Next Hop Gateway

Enter a valid IPv4 address for the next hop.

Management Access

Enter a valid IPv6 address for the management interface.

Static Route

Enter an IPv6 address for the static route to route to the other network devices.

Next Hop Gateway

Enter a valid IPv6 address for the next hop.

Note:

• This option is not available if the management port is fxp0. If the management port is not fxp0, a new dedicated functional management zone is created and the configures access protocols are added to the zone.

• In the Setup wizard, you cannot add any additional protocols.

HTTPS

Select this option for the web management using HTTP secured by SSL.

Note: By default, this option is selected.

Ping

Select this option for the internet control message protocol.

Note: By default, this option is selected.

Netconf

Select this option for the NETCONF Service.

Interfaces

View the interfaces name populated from your device factory default settings.

Edit

Select a zone and click the pencil icon at the right corner of the table to modify the configuration.

For more information on editing zones, see Table 4 and Table 5.

Detailed View

Hover over the zone name and click the Detailed View icon to view the zone and interface details.

You can also click More and select Detailed View for the selected zone.

Note: Your device must have internet connectivity to use IPS, AppSec, Web filtering, Juniper Sky ATP, and Security threat intelligence services.

Interfaces

View the interfaces name populated from your device factory default settings.

Edit

Select a zone and click the pencil icon at the right corner of the table to modify the configuration.

For more information on editing zones, see Table 4 and Table 5.

Detailed View

Hover over the zone name and click the Detailed View icon to view the zone and interface details.

You can also click More and select Detailed View for the selected zone.

Default Gateway (IPv4)

Enter the IPv4 address of the default gateway.

On-Box Reporting

Enable this option to generate on-box reports.

Note: We recommend you to use Stream mode logging to syslog server.

UTM

Enable this option for configuring UTM services.

UTM Type

Select an option to configure UTM features:

• Web Filtering

• Anti Virus

• Anti Spam

IPS

Enable this option to install the IPS signatures.

• IPS Policy—Displays the IPS policy wizard name.

• License—Enter the license key and click Install License to add a new license.

  Note: The installation process may take few minutes.

• IPS Signature—Click Browse to navigate to the IPS signature package folder and select it. Click Install to install the selected IPS signature package.

  Note: You can download the IPS signature offline package at https://support.juniper.net/support/downloads/.

Security Intelligence

Enable this option to use Security Intelligence services.

Note: After the Security Intelligence configuration is pushed, only the SRX300 line of devices and SRX550M devices are rebooted. Your device must have internet connectivity to enable Juniper Sky ATP enrollment process through J-Web.

Note: The table lists the security policy along with the selected advanced security settings.

From Zone

Name of the source zone.

Note:

• If you are in Standard mode, permits all traffic from the trust zone.

• If you are in Tap mode, permits all traffic from the tap zone.

Source Address

Name of the source address (not the IP address) of a policy.

Application

Name of a preconfigured or custom application of the policy match.

Advanced Security

Name of the configured advanced security settings.

Description

Enter the description for the zone.

Source Identity Log

Enables this option to trigger user identity logging when that zone is used as the source zone in a security policy.

Protocols

By default, this option is enabled. You can disable if required.

all—Specifies all protocol.

Name

Displays the name of the interface

IP Address

Displays the IP address of the interface.

Services

Displays the system service option selected.

Add

Procedure

1. Click +.

   The Add Interface page appears.

2. Enter the following details:

   • General (fields for switching interface):

     • Type (family)—Select Switching.

       Note: This option will be available for only SRX300 line of devices, SRX550M, and SRX1500 devices. For SRX5000 line of devices, SRX4100, SRX4200, SRX4600, and vSRX devices, the Type (family) field is not available.

     • Routing Interface (IRB) Unit—Enter the IRB unit.

     • Description—Enter the description for the interface.

   • General (fields for routing interface):

     • Type (family)—Select Routing.

       For SRX5000 line of devices, SRX4100, SRX4200, SRX4600, and vSRX devices, the Type (family) field is not available.

     • Interface Name—Select an option from list.

     • Interface Unit—Enter the Inet unit.

       Note: VLAN tagging is enabled automatically if the interface unit is higher than zero.

     • Description—Enter the description for the interface.

     • VLAN ID—Enter the VLAN ID.

       Note: VLAN ID is mandatory if the interface unit is higher than zero.

     
     

   • Interfaces—Select an interface from the Available column and move it to the Selected column.

     Note: This option is available only for the Switching family type.

   • IPv4:

     • IPv4 Address—Enter a valid IPv4 address for the switching or the routing interface.

     • Subnet Mask—Enter a subnet mask for the IPv4 address.

   • IPv6:

     • IPv6 Address—Enter a valid IPv6 address for the switching or the routing interface.

     • Subnet Prefix—Enter a subnet prefix for the IPv6 address.

   • VLAN Details:

     Note: This option is available only for the Switching family type.

     • VLAN Name—Enter an unique name for the VLAN.

     • VLAN ID—Enter the VLAN ID.

   • DHCP Local Server:

     • DHCP Local Server—Enable this option to configure the switch to function as an extended DHCP local server.

     • DHCP Pool Name—Enter the DHCP pool name.

     • DHCP Pool Range (Low)—Enter an IP address that is the lowest address in the IP address pool range.

     • DHCP Pool Range (High)—Enter an IP address that is the highest address in the IP address pool range.

       Note: This address must be greater than the address specified in DHCP Pool Range (Low).

     • Propagate Settings from—Select an interface on the router through which the resolved DHCP queries are propagated to the DHCP pool.

   • System Services—Select system services from the list in the Available column and then click the right arrow to move it to the Selected column.

     The available options are:

     • all—Specify all system services.

     • any-service—Specify services on entire port range.

     • appqoe—Specify the APPQOE active probe service.

     • bootp—Specify the Bootp and dhcp relay agent service.

     • dhcp—Specify the Dynamic Host Configuration Protocol.

     • dhcpv6—Enable Dynamic Host Configuration Protocol for IPV6.

     • dns—Specify the DNS service.

     • finger—Specify the finger service.

     • ftp—Specify the FTP protocol.

     • http—Specify the Web management using HTTP.

     • https—Specify the Web management using HTTP secured by SSL.

     • ident-reset—Specify the send back TCP RST IDENT request for port 113.

     • ike—Specify the Internet key exchange.

     • lsping—Specify the Label Switched Path ping service.

     • netconf—Specify the NETCONF Service.

     • ntp—Specify the network time protocol.

     • ping—Specify the internet control message protocol.

     • r2cp—Enable Radio-Router Control Protocol.

     • reverse-ssh—Specify the reverse SSH Service.

     • reverse-telnet—Specify the reverse telnet Service.

     • rlogin—Specify the Rlogin service

     • rpm—Specify the Real-time performance monitoring.

     • rsh—Specify the Rsh service.

     • snmp—Specify the Simple Network Management Protocol.

     • snmp-trap—Specify the Simple Network Management Protocol trap.

     • ssh—Specify the SSH service.

     • tcp—encap-Specify the TCP encapsulation service.

     • telnet—Specify the Telnet service.

     • tftp—Specify the TFTP

     • traceroute—Specify the traceroute service.

     • webapi-clear-text—Specify the Webapi service using http.

     • webapi-ssl—Specify the Webapi service using HTTP secured by SSL.

     • xnm-clear-text—Specify the JUNOScript API for unencrypted traffic over TCP.

     • xnm-ssl—Specify the JUNOScript API Service over SSL.

   • Protocols—Select protocols from the list in the Available column and then click the right arrow to move it to the Selected column.

     The available options are:

     • all—Specifies all protocol.

     • bfd—Bidirectional Forwarding Detection.

     • bgp—Border Gateway Protocol.

     • dvmrp—Distance Vector Multicast Routing Protocol.

     • igmp—Internet Group Management Protocol.

     • ldp—Label Distribution Protocol.

     • msdp—Multicast Source Discovery Protocol.

     • nhrp- Next Hop Resolution Protocol.

     • ospf—Open shortest path first.

     • ospf3—Open shortest path first version 3.

     • pgm—Pragmatic General Multicast.

     • pim—Protocol Independent Multicast.

     • rip—Routing Information Protocol.

     • ripng—Routing Information Protocol next generation.

     • router-discovery—Router Discovery.

     • rsvp—Resource Reservation Protocol.

     • sap—Session Announcement Protocol.

     • vrrp—Virtual Router Redundancy Protocol.

Delete

Select an interface and click the delete icon at the top right corner of the table.

A confirmation window appears. Click Yes to delete the selected interface or click No to discard.

Description

Enter the description for the zone.

Source Identity Log

Enables this option for system services.

Name

Displays the name of the physical interface

Address Mode

Displays the type of address mode.

Services

Displays the system service option selected.

Add

Procedure

1. Click +.

   The Add Interface page appears.

2. Enter the following details:

   • General:

     • Interface Name—Select an interface from the list.

     • Interface Unit—By default 0 will be populated. You can change the unit value if required.

     • Description—Enter the description for the interface.

     • Address Mode—Select an address mode for the interface. The available options are DHCP Client, PPPoE (PAP), PPPoE (CHAP) and Static IP.

       Note: PPPoE (PAP) and PPPoE (CHAP) are not supported for SRX5000 line of devices and if any of the devices are in passive mode.

     • Username—Enter a username for PPPoE (PAP) or PPPoE (CHAP) authentication.

     • Password—Enter a password for PPPoE (PAP) or PPPoE (CHAP) authentication.

   • IPv4:

     Note: This option is available only for the Static IP address mode.

     • IPv4 Address—Enter a valid IPv4 address for the interface.

     • Subnet Mask—Enter a subnet mask for the IPv4 address.

   • IPv6:

     Note: This option is available only for the Static IP address mode.

     • IPv6 Address—Enter a valid IPv6 address for the interface.

     • Subnet Prefix—Enter a subnet prefix for the IPv6 address.

   • System Services—Select system services from the list in the Available column and then click the right arrow to move it to the Selected column.

   • Protocols—Select protocols from the list in the Available column and then click the right arrow to move it to the Selected column.

Delete

Select an interface and click the delete icon at the top right corner of the table.

A confirmation window appears. Click Yes to delete the selected interface or click No to discard.