Technical Documentation

Performing Initial Software Configuration on the SRX100 Services Gateway Using the J-Web Interface

This topic includes the following sections:

Establishing Basic Connectivity

To establish basic connectivity:

  1. Connect an Ethernet cable from any of the fe-0/0/1 to fe-0/0/7 ports to the Ethernet port on the management device (workstation or laptop).
  2. Connect the power cable to the device and a power source. (We recommend using a surge protector.) Note the following indications:
    • Power LED (solid green): The device is receiving power.
    • Status LED (solid green): The device is operating normally.

    Note: The services gateway functions as a DHCP server and will assign an IP address to the management device.

  3. Ensure that the management device acquires an IP address on the 192.168.1.0/24 subnetwork (other than 192.168.1.1) from the device.

    Note: If an IP address is not assigned to the management device, manually configure an IP address in the 192.168.1.0/24 subnetwork. Do not assign the 192.168.1.1 IP address to the management device, as this IP address is assigned to the device.

  4. Access the J-Web interface:
    1. Launch a Web browser from the management device.
    2. Enter 192.168.1.1 in the Address box.
    3. Specify the default username as root. Do not enter any value in the Password box.
    4. Press Enter. The J-Web Initial Setup page is displayed.
  5. Configure the basic settings such as Host Name, Domain Name, Root Password, and IP Address for your services gateway. Ensure that you have configured the IP address, root authentication, and default gateway before you apply the configuration.

    Note: All network and management access settings are optional.

  6. Click Apply to apply the configuration.

    Note: After configuring the basic settings, the Web session may timeout. Refresh or relaunch the page if the applied configuration page is not displayed .

Configuring Basic System Properties

Table 1 through Table 3 provide the summary of configuration details for initial setup.

Table 1: Basic Configuration Summary (Device Identification)

Field

Function

Your Action

Host Name

Defines the hostname of the services gateway.

Type the hostname.

Domain Name

Defines the network or subnetwork that the services gateway belongs to.

Type the domain name.

Root Password (required)

Sets the password that user root can use to log in to the services gateway.

Type a plaintext password that the system encrypts.

Note: After a root password has been defined, it is required when you log in to the J-Web user interface or the CLI.

Verify Root Password (required)

Verifies the root password has been typed correctly.

Retype the password.

DNS Name Servers

Specifies a DNS server that the services gateway can use to resolve hostnames into addresses.

Add an IP address by selecting it in the box to the left of the Add button, then clicking Add.

Delete an IP address by clicking it in the box above the Add button, then clicking Remove.

Domain Search

Adds each domain name that includes the services gateway to the configuration so that each domain is included in a DNS search.

Add a domain name by typing it in the box to the left of the Add button, then clicking Add.

Delete a domain name by , clicking it in the box above the Add button, then clicking Remove.

Table 2: Basic Configuration Summary (Management Access)

Field

Function

Your Action

Default Gateway

Defines a default gateway through which to direct packets addressed to networks not explicitly listed in the routing table.

Type a 32-bit IP address in dotted decimal notation.

Loopback Address

Defines a reserved IP address that is always available on the services gateway. If no address is entered, this address is set to 127.0.0.1/32.

Type a 32-bit IP address and prefix length in dotted decimal notation.

Allow Telnet Access

Allows remote access to the services gateway using Telnet.

Enable Telnet access by selecting the box.

Allow JUNOScript over Clear-Text Access

Allows JUNOScript to access the services gateway using a protocol for sending unencrypted text over a TCP connection.

Enable JUNOScript access over cleartext by selecting the box.

Allow SSH Access

Allows remote access to the services gateway using SSH.

Enable SSH access by selecting the box.

Table 3: Basic Configuration Summary (Date and Time)

Field

Function

Your Action

Date and Time

Time Zone

Identifies the time zone in which the services gateway is located.

From the list, select the appropriate time zone.

NTP Servers

Specifies an NTP server that the services gateway can reach to synchronize the system time.

Add an IP address by clicking Add and entering IP address and then clicking OK.

Delete an IP address by clicking it in the box and then clicking Delete.

Current System Time

Synchronizes the system time with the NTP server or allows you to manually set the system time and date.

  • Set the time immediately using the NTP server; select NTP Servers. The services gateway sends a request to the NTP server and synchronizes the system time.

    Note: If you are configuring other settings on this page, the services gateway also synchronizes the system time using the NTP server when you click OK.

  • Set the time manually by selecting the Manual button. A window allows you to select the current date and time from lists.

To configure basic system properties:

  1. In the J-Web interface, select Configure> System properties and select the required tab and proceed with configuring the other settings. See Table 1 through Table 3 for details.
  2. Click one of the following buttons:
    • Click OK to save changes.
    • Click Cancel to cancel your entries and return to the previous page.
    • Click Commit to apply the configuration and other pending changes (if any) and click Discard to discard pending changes.
  3. Configure an interface as follows:
    1. In the J-Web interface, select Configure>Interfaces

      The Interfaces page appears and lists the network interfaces present on the services gateway.

    2. Under the Interface Name column, click the interface you want to configure (for example fe-0/0/0).
    3. Under Logical Interfaces, click Add.
    4. Under IPv4 Addresses and Prefixes, click Add.
    5. In the IPv4 Address and Prefix fields, enter an IP address and a subnet mask
    6. Click OK. The configured IP address is included in the Address Prefix column.
  4. Configure the default route as follows
    1. In the J-Web interface, select Configure>Routing>Static routing
    2. In the Static Routing page, click Add.
    3. Add an IP address for Route and Next-hop.
    4. Click OK. The configured IP address is included in the Static Routing page.
  5. Configure basic security zones and bind them to traffic interfaces.
    1. In the J-Web interface, under the Configure tab, navigate to Security > Zones
    2. Under Security Zone, click Add.
    3. Enter a name for the zone in the Zone Name field.
    4. Scroll down to the Interfaces Configuration panel on the page to add an interface to a specific zone.
    5. Click OK to save the configuration.
  6. Configure basic security policies.
    1. In the J-Web interface, under the Configure tab, navigate to Security > Policy.
    2. In the Security Policy page, click Add.
    3. Enter a name for the policy and select the source and destination zones.
    4. Enter a source address, destination address, and an application.
    5. Select Policy Action as Permit, or Deny, or Reject.
    6. Click OK to save the configuration.

Note: Click Commit to apply the configuration and other pending changes (if any) and click Discard to discard pending changes.

For more instructions on managing users and operations, monitoring network performance, upgrading software, and diagnosing common problems on an SRX100 Series Services Gateways, see the JUNOS Software Administration Guide.

Published: 2010-04-27