Technical Documentation

Configuring Basic Settings for the SRX650 Services Gateway with a Configuration Editor

To establish basic connectivity on an SRX650 Services Gateway:

  1. Identify the services gateway.
  2. Connect it to the network.
  3. Specify basic network settings.

In a typical network, the services gateway has the basic settings listed in Table 1. Determine the values to set on the services gateway in your network.

Table 1: Sample Settings on the SRX650 Services Gateway

SRX650 Services Gateway Property

Sample Value

Services gateway hostname

devicea

Access for user root

SSH RSA public key

IP address of the NTP server used to synchronize system time

10.148.2.21

IP address of the DNS server to which DNS requests are sent

10.148.2.32

Domains to which the services gateway belongs

lab.device.net and device.net

Loopback IP address and prefix length for the services gateway lo0 interface

172.16.1.24/32

To use a configuration editor to configure basic settings:

  1. Navigate to the top of the configuration hierarchy in the CLI.
  2. Configure the basic configuration settings.
  3. If you are using J-Web:
    • Click Commit to view a summary of your changes.
    • Click OK to commit the configuration.
  4. If you are using the CLI, commit the configuration by entering the commit command.
  5. Verify the basic configuration settings.

Table 2: Configuring Basic Settings

Task

J-Web

CLI

Navigate to the System level in the configuration hierarchy.

  1. In J-Web, select Configure>System Properties>System Identity.
  2. Click Edit.

From the [edit] hierarchy level, enter

edit system

Define the hostname of the services gateway.

In the Hostname box, type the hostname of the device—for example, devicea.

Set the hostname. For example:

set host-name devicea

Identify the domain in which the services gateway is located.

In the Domain name box, type the domain name of the services gateway—for example, lab.device.net.

Set the domain name. For example:

set domain-name lab.device.net

Allow SSH remote access.

  1. In J-Web, select Configure>System Properties>Management Access.
  2. Click Edit.
  3. Click the Services tab.
  4. Next to Enable SSH, click the check box.
  5. Click OK.

Set remote access for SSH:

set services ssh

Define root authentication for access to the services gateway.

Note: For readability, the entire key is not shown.

  1. In the Nested configuration section, next to Root authentication, click Configure or Edit.
  2. Next to SSH RSA, click Add New Entry.
  3. In the Authorized key box, type the RSA password—for example, ssh-rsa AAAAB3Nza...D9Y2gXF9ac== root@devicea.lab.device.net.
  4. Click OK.
  5. Click OK a second time to return to the Configuration page.

Set the root password. For example:

set root-authentication ssh-rsa “ssh-rsa AAAAB3Nza...D9Y2gXF9ac== root@devicea.lab.device.net”

Define the time zone in which the services gateway is located.

  1. In J-Web, select Configure>System Properties>Date Time.
  2. Click Edit.
  3. In the Timezone list, select the time zone for your services gateway—for example, America/Los_Angeles
  4. Click OK.

Set the time zone. For example:

set time-zone America/Los_Angeles

Define the NTP server to which NTP requests can be sent.

  1. In the Nested configuration section, next to NTP, click Configure or Edit.
  2. Next to Server, click Add New Entry.
  3. In the Address box, type the NTP server's IP address—for example, 10.148.2.21.
  4. Click OK.
  5. Click OK a second time to return to the Configuration page.

Set the address of the NTP server. For example:

set ntp server 10.148.2.21

Define the DNS server that receives DNS requests.

  1. In J-Web, select Configure>System Properties>System Identity.
  2. Click Edit.
  3. Next to DNS servers, click Add.
  4. In the Add DNS Server box, type the IP address of the DNS server—for example, 10.148.2.32.
  5. Click OK.
  6. Click OK a second time.

Set the address of the DNS server. For example:

set name-server 10.148.2.32

Add each domain to which the services gateway belongs.

  1. In J-Web, select Configure>System Properties>System Identity.
  2. Click Edit.
  3. Next to Domain search, click Add.
  4. In the Add Domain Search box, type the name of the domain in which the services gateway is located—for example, lab.device.net.
  5. Click OK.
  6. Next to Domain search, click Add.
  7. In the Add Domain Search box, type the name of another domain that the services gateway belongs to—for example, device.net
  8. Click OK.
  9. Click OK a second time.

Set the domains to be searched. For example:

set domain-search lab.device.net

set domain-search device.net

Define the IP address for Io0.0.

  1. In J-Web, select Configure>Interfaces.
  2. In the Interfaces table, locate and click the Io0.0 row.
  3. Under the IPv4 Addresses and Prefixes box, click Add.
  4. In the IPv4 Address and Prefix box, type the address and prefix length for the loopback interface—for example, 172.16.1.24/32.
  5. Click OK.
  6. Click OK a second time.
  1. From the [edit] hierarchy level, enter

    edit interfaces

  2. Delete the existing IP address:

    delete Io0 unit 0 family inet address

  3. Set the IP address and prefix length of Io0.0. For example:

    set Io0 unit 0 family inet address 172.16.1.24/32

Published: 2010-02-01