Technical Documentation

Basic Configuration of the Dual CT1/E1 GPIM

To enable the Dual CT1/E1 Gigabit-Backplane Physical Interface Module (GPIM) installed on your SRX Series Services Gateway, you must configure its properties. You can perform the same configuration tasks using either J-Web or the CLI. In addition, you can configure a wide variety of options that are not encountered frequently.

Using J-Web

To perform basic configuration for the Dual CT1/E1 GPIM and to configure network interfaces for the services gateway with J-Web:

  1. In J-Web, select Configure>Interfaces.

    The Interfaces page lists the network interfaces present on the services gateway. Verify whether the interface has been configured by reviewing the information in the Configured column (yes/no).

  2. Select the name of the parent interface you want to edit.

    Note: You must configure the parent CT1 or CE1 interface before you configure the child T1 or E1 interface, respectively.

  3. From the CT1/CE1 Interfaces General Configuration page, for the parent CT1 or CE1 interface, select no for the Partitioning field.
  4. Click OK to save changes.
  5. Select the name of the child interface (T1 or E1) you want to edit.
  6. To use the port on the GPIM, you must assign it to a security zone other than the Null zone. Optionally, you can also assign the port an IP address (for example, 192.168.3.1/24). Enter or select the following settings:
    1. Select Configure>Security>Zones.
    2. Add or select a security zone other than Null; for example, Trust.
    3. For host inbound traffic, set the following:
      • System Services=Allow All
      • Protocols=Allow All
    4. Click OK to save changes, and click Commit to apply the configuration and other pending changes (if any).
  7. To use the port on the GPIM, you must also set security policies. Select the following settings:
    1. Select Configure>Security>Policy>FW Policies.
    2. Set Policy Action: Default Policy Action=Permit-All.
    3. Click OK to save changes, and click Commit to apply the configuration and other pending changes (if any).

For advanced configuration information, see the Junos OS Network Interfaces Configuration Guide.

Using the CLI to Configure the CT1 Interface

To perform basic configuration for the Dual CT1/E1 GPIM (for the CT1 interface) and to configure network interfaces for the services gateway with the CLI:

Note: You must configure the parent CT1 interface before you can configure the child T1 interface.

  • Verify that the Dual CT1/E1 GPIM is installed on the services gateway:

    show chassis hardware

  • Verify the FPC status of the interface:

    show chassis fpc

  • Configure the parent CT1 interface with no partitioning:

    set interfaces ct1-1/0/0 no-partition interface-type t1

  • Configure the child T1 interface and assign an IP address:

    set interfaces t1-1/0/0 unit 0 family inet address ip4–address/prefix

  • Assign MTU values to the child T1 interface:

    set interfaces t1-1/0/0 unit 0 mtu mtu values

  • Configure a security zone for the child T1 interface and set the configuration for host inbound traffic services and protocols:

    set security zones security-zone trust interfaces t1-1/0/0 host-inbound-traffic system-services all
    set security zones security-zone trust interfaces t1-1/0/0 host-inbound-traffic protocols all

  • Set security policies:

    set security policies default-policy permit-all

Using the CLI to Configure the CE1 Interface

To perform basic configuration for the Dual CT1/E1 GPIM (for the CE1 interface) and to configure network interfaces for the services gateway with the CLI:

Note: You must configure the parent CE 1 interface before you can configure the child E1 interface.

  • Verify that the Dual CT1/E1 GPIM is installed on the services gateway:

    show chassis hardware

  • Verify the FPC status of the interface:

    show chassis fpc

  • Configure the parent CE1 interface with no partitioning:

    set interfaces ce1-1/0/0 no-partition interface-type e1

  • Configure the child E1 interface and assign an IP address:

    set interfaces e1-1/0/0 unit 0 family inet address ip4–address/prefix

  • Assign MTU values to the child E1 interface:

    set interfaces e1-1/0/0 unit 0 mtu mtu values

  • Configure a security zone for the child E1 interface and set the configuration for host inbound traffic services and protocols:

    set security zones security-zone trust interfaces e1-1/0/0 host-inbound-traffic system-services all
    set security zones security-zone trust interfaces e1-1/0/0 host-inbound-traffic protocols all

  • Set security policies:

    set security policies default-policy permit-all


Published: 2010-07-13

Help
|
My Account
|
Log Out