Management Interface

Management interfaces are the primary interfaces for accessing the device remotely. Typically, a management interface is not connected to the in-band network, but is connected instead to the device's internal network. Through a management interface you can access the device over the network using utilities such as ssh and telnet and configure it from anywhere, regardless of its physical location. Simple Network Management Protocol (SNMP) can use the management interface to gather statistics from the device.

Management interfaces vary based on device type:

• The J-series Services Routers include four built-in Gigabit Ethernet interfaces located on the front panel of the router chassis named ge-0/0/0, ge-0/0/1, ge-0/0/2, and ge-0/0/3 from left to right. These are not physically dedicated management interfaces, although the factory configuration for these routers automatically enables the J-Web user interface on these interfaces. You can use them to pass traffic or you can segregate one off and place it in the management zone to be used as a management interface. To use a built-in interface as a management Ethernet interface, configure it with a valid IP address.
• The SRX 5600 and SRX 5800 services gateways include a 10/100-Mbps Ethernet port on the Routing Engine (RE). This port, which is labeled ETHERNET, is a dedicated out-of-band management interface for the device. The JUNOS software automatically creates the device’s management interface fxp0. To use fxp0 as a management port, you must configure its logical port fxp0.0 with a valid IP address. While you can use fxp0 to connect to a management network, you cannot place it into the management zone.

Note: On the SRX 5600 and SRX 5800 services gateways, you must first connect to the device through the serial console port before assigning a unique IP address to the management interface.

As a security feature, users cannot log in as root through a management interface. To access the device as root, you must use the console port.

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.