Basic Configuration of the Dual CT1/E1 GPIM
To enable the Dual CT1/E1 Gigabit-Backplane Physical Interface Module (GPIM) installed on your SRX Series Services Gateway, you must configure its properties. You can perform the same configuration tasks using either J-Web or the CLI. In addition, you can configure a wide variety of options that are not encountered frequently.
Using J-Web
To perform basic configuration for the Dual CT1/E1 GPIM and to configure network interfaces for the services gateway with J-Web:
- In J-Web, select Configure>Interfaces.
The Interfaces page lists the network interfaces present on the services gateway. Verify whether the interface has been configured by reviewing the information in the Configured column (yes/no).
- Select the name of the interface you want to edit.
- To use the port on the XPIM, you must assign it
to a security zone other than the Null zone. Optionally, you can also
assign the port an IP address (for example, 192.168.3.1/24). Enter or select the following settings:
- Select Configure>Security>Zones.
- Add or select a security zone other than Null; for example, Trust.
- For host inbound traffic, set the following:
- System Services=Allow All
- Protocols=Allow All
- Click OK to save changes, and click Commit to apply the configuration and other pending changes (if any).
- To use the port on the GPIM, you must also set
security policies. Select the following settings:
- Select Configure>Security>Policy>FW Policies.
- Set Policy Action: Default Policy Action=Permit-All.
- Click OK to save changes, and click Commit to apply the configuration and other pending changes (if any).
For advanced configuration information, see the JUNOS Software Network Interfaces Configuration Guide.
Using the CLI to Configure the CT1 Interface
To perform basic configuration for the Dual CT1/E1 GPIM (for the CT1 interface) and to configure network interfaces for the services gateway with the CLI:
- Verify that the Dual CT1/E1 GPIM is installed on the services
gateway:
show chassis hardware
- Verify the FPC status of the interface:
show chassis fpc
- Assign the port an IP address:
set interfaces ct1-1/0/0 unit 0 family inet address interface address/destination prefix
- Assign MTU values:
set interfaces ct1-1/0/0 unit 0 family inet mtu mtu values
- Add or select a security zone; for example, Trust:
set security zones security-zone trust interfaces ct1-1/0/0.0 host-inbound-traffic system-services all
- Add or select security zones for host inbound traffic
protocol options:
set security zones security-zone trust interfaces ct1-1/0/0.0 host-inbound-traffic protocols all
- Set security policies:
set security policies default-policy permit-all
Using the CLI to Configure the CE1 Interface
To perform basic configuration for the Dual CT1/E1 GPIM (for the CE1 interface) and to configure network interfaces for the services gateway with the CLI:
- Verify that the Dual CT1/E1 GPIM is installed on the services
gateway:
show chassis hardware
- Verify the FPC status of the interface:
show chassis fpc
- Assign the port an IP address:
set interfaces ce1-1/0/0 unit 0 family inet address interface address/destination prefix
- Assign MTU values:
set interfaces ce1-1/0/0 unit 0 family inet mtu mtu values
- Add or select a security zone; for example, Trust:
set security zones security-zone trust interfaces ce1-1/0/0.0 host-inbound-traffic system-services all
- Add or select security zones for host inbound traffic
protocol options:
set security zones security-zone trust interfaces ce1-1/0/0.0 host-inbound-traffic protocols all
- Set security policies:
set security policies default-policy permit-all

