Technical Documentation

Basic Configuration of the DOCSIS Mini-Physical Interface Module

To enable the Data over Cable System Interface Specifications Mini-Physical Interface Module (DOCSIS Mini-PIM) installed on the SRX Series Services Gateway, you must configure its properties. You can perform the same configuration tasks using either J-Web or the CLI.

Using J-Web

To perform basic configuration for the DOCSIS Mini-PIM and to configure network interfaces for the services gateway with J-Web:

  1. In J-Web, select Configure>Interfaces.

    The Interfaces page displays and lists the network interfaces present on the services gateway, along with configuration information (if configured).

  2. To configure properties for a network interface (Mini-PIM), select the interface name (cm-1/0/0), and click Edit.
  3. To use the port on the Mini-PIM, you must assign it to a security zone other than the Null zone. Optionally, you can also assign the port an IP address (for example, 192.168.3.1/24). Enter or select the following settings:
    1. Select Configure>Security>Zones.
    2. Add or select a security zone other than Null; for example, Trust.
    3. For host inbound traffic, set the following:
      • System Services=Allow All
      • Protocols=Allow All
    4. Click OK to save changes, and click Commit to apply the configuration and other pending changes.
  4. To use the port on the Mini-PIM, you must also set security policies. Select the following settings:
    1. Select Configure>Security>Policy>FW Policies.
    2. Set Policy Action: Default Policy Action=Permit-All
    3. Click OK to save changes, and click Commit to apply the configuration and other pending changes (if any).

    For more information, in the J-Web user interface, select Configure>Interfaces and click Help.

Using the CLI

To perform basic configuration of the DOCSIS Mini-PIM and to configure network interfaces for the services gateway with the CLI:

  • Verify that the DOCSIS Mini-PIM is installed on the services gateway:

    show chassis hardware

  • Verify the status of the interface:

    show interfaces terse

  • Assign the port an IP address:

    set interfaces cm-1/0/0 unit 0 family inet address interface address/destination prefix

  • Add or select a security zone; for example, Trust:

    set security zones security-zone trust interfaces cm-1/0/0.0 host-inbound-traffic system-services all

  • Add or select security zones for host inbound traffic protocol options:

    set security zones security-zone trust interfaces cm-1/0/0 host-inbound-traffic protocols all

  • Set security policies:

    set security policies default-policy permit-all

See the Junos OS Network Interfaces Configuration Guide for more details.


Published: 2010-07-13

Help
|
My Account
|
Log Out