16-Port Gigabit Ethernet XPIM Basic Configuration

Using the J-Web Interface

To perform basic configuration for the 16-Port Gigabit Ethernet XPIM and to configure network interfaces for the services gateway using the J-Web interface:

1. In the J-Web interface, select Configure>Interfaces>Ports.

   The Interfaces page lists the network interfaces present on the services gateway. Verify whether the interface has been configured by reviewing the information in the Configured column (yes/no).

2. Select the interface name to edit.
3. To use the port on the XPIM, you must assign it to a security zone other than the Null zone. Optionally, you can also assign the port an IP address (for example, 192.168.3.1/24). Enter or select the following settings:
   1. Select Configure>Security>Zones.
   2. Add or select a security zone other than Null; for example, Trust.
   3. For host inbound traffic, set the following:
      • System Services=Allow All
      • Protocols=Allow All
   4. Click OK, and click Commit to apply the configuration and other pending changes (if any).
4. To use the port on the XPIM, you must also set security policies. Select the following settings:
   1. Select Configure>Security>Policy>Apply Policy.
   2. Set Policy Action: Default Policy Action=Permit-All.
   3. Click OK to save changes, and click Commit to apply the configuration and other pending changes (if any).

For advanced configuration information, see the Junos OS Network Interfaces Configuration Guide.

Using the CLI

To perform basic configuration for the 16-Port Gigabit Ethernet XPIM and to configure network interfaces for the services gateway with the CLI:

• Verify that the 16-Port Gigabit Ethernet XPIM is installed on the services gateway:

  show chassis hardware

• Verify the FPC status of the interface:

  show chassis fpc

• Assign the port an IP address:

  set interfaces ge-1/0/0 unit 0 family inet address interface address/destination prefix

• Assign MTU values:

  set interfaces ge-1/0/0 unit 0 family inet mtu mtu values

• Set link options:

  set interfaces ge-1/0/0 gigether-options auto-negotiation

• Add or select a security zone; for example, Trust:

  set security zones security-zone trust interfaces ge-1/0/0.0 host-inbound-traffic system-services all

• Add or select security zones for host inbound traffic:

  set security zones security-zone trust interfaces ge-1/0/0.0 host-inbound-traffic protocols all

• Set security policies:

  set security policies default-policy permit-all