Technical Documentation

Basic Configuration of the Quad CT1/E1 GPIM

To enable the Quad CT1/E1 Gigabit-Backplane Physical Interface Module (GPIM) installed on your SRX Series Services Gateway, you must configure its properties. You can perform the same configuration tasks using either J-Web or the CLI. In addition, you can configure a wide variety of options that are not encountered frequently.

Using J-Web

To perform basic configuration for the Quad CT1/E1 GPIM and to configure network interfaces for the services gateway with J-Web:

  1. In J-Web, select Configure>Interfaces.

    The Interfaces page lists the network interfaces present on the services gateway. Verify whether the interface has been configured by reviewing the information in the Configured column (yes/no).

  2. Select the name of the interface you want to edit.
  3. To use the port on the XPIM, you must assign it to a security zone other than the Null zone. Optionally, you can also assign the port an IP address (for example, 192.168.3.1/24). Enter or select the following settings:
    1. Select Configure>Security>Zones.
    2. Add or select a security zone other than Null; for example, Trust.
    3. For host inbound traffic, set the following:
      • System Services=Allow All
      • Protocols=Allow All
    4. Click OK, and click Commit to apply the configuration and other pending changes (if any).
  4. To use the port on the GPIM, you must also set security policies. Select the following settings:
    1. Select Configure>Security>Policy>FW Policies.
    2. Set Policy Action: Default Policy Action=Permit-All.
    3. Click OK to save changes, and click Commit to apply the configuration and other pending changes (if any).

For advanced configuration information, see the JUNOS Software Network Interfaces Configuration Guide.

Using the CLI to Configure the CT1 Interface

To perform basic configuration for the Quad CT1/E1 GPIM (for the CT1 interface) and to configure network interfaces for the services gateway with the CLI:

  • Verify that the Quad CT1/E1 GPIM is installed on the services gateway:

    show chassis hardware

  • Verify the FPC status of the interface:

    show chassis fpc

  • Assign the port an IP address:

    set interfaces ct1-1/0/0 unit 0 family inet address interface address/destination prefix

  • Assign MTU values:

    set interfaces ct1-1/0/0 unit 0 family inet mtu mtu values

  • Add or select a security zone; for example, Trust:

    set security zones security-zone trust interfaces ct1-1/0/0.0 host-inbound-traffic system-services all

  • Add or select security zones for host inbound traffic protocol options:

    set security zones security-zone trust interfaces ct1-1/0/0.0 host-inbound-traffic protocols all

  • Set security policies:

    set security policies default-policy permit-all

Using the CLI to Configure the CE1 Interface

To perform basic configuration for the Quad CT1/E1 GPIM (for the CE1 interface) and to configure network interfaces for the services gateway with the CLI:

  • Verify that the Quad CT1/E1 GPIM is installed on the services gateway:

    show chassis hardware

  • Verify the FPC status of the interface:

    show chassis fpc

  • Assign the port an IP address:

    set interfaces ce1-1/0/0 unit 0 family inet address interface address/destination prefix

  • Assign MTU values:

    set interfaces ce1-1/0/0 unit 0 family inet mtu mtu values

  • Add or select a security zone; for example, Trust:

    set security zones security-zone trust interfaces ce1-1/0/0.0 host-inbound-traffic system-services all

  • Add or select security zones for host inbound traffic protocol options:

    set security zones security-zone trust interfaces ce1-1/0/0.0 host-inbound-traffic protocols all

  • Set security policies:

    set security policies default-policy permit-all


Published: 2010-05-06