Viewing Factory-Default Settings of the SRX550 Services Gateway
To view the factory-default configuration of the services gateway using the CLI:
- Log in as the root user and provide your credentials.
- View the list of default config files.
user@host> file list /etc/config
The following sample output displays the list of factory-default configuration files:
j-series-defaults.conf srx210h-defaults.conf jsrxsme-series-defaults.conf srx210h-factory.conf jsrxsme-series-factory.conf srx210h-poe-defaults.conf junos-defaults.conf srx210h-poe-factory.conf junos-factory.conf srx210he-defaults.conf junos-fips-defaults.conf srx210he-factory.conf ptx-series-defaults.conf srx210he-poe-defaults.conf srx100-8xfe-factory.conf srx210he-poe-factory.conf srx100b-defaults.conf srx210he2-defaults.conf srx100b-factory.conf srx210he2-factory.conf srx100h-defaults.conf srx210he2-poe-defaults.conf srx100h-factory.conf srx210he2-poe-factory.conf srx100h2-defaults.conf srx220-8xge-factory.conf srx100h2-factory.conf srx220-poe-8xge-factory.conf srx110-8xfe-vdsl-factory.conf srx220h-defaults.conf srx110-8xfe-vdsl-wl-factory.conf srx220h-factory.conf srx110-8xfe-wl-factory.conf srx220h-poe-defaults.conf srx110b-defaults.conf srx220h-poe-factory.conf srx110b-va-defaults.conf srx220h2-defaults.conf srx110b-va-factory.conf srx220h2-factory.conf srx110b-vb-defaults.conf srx220h2-poe-defaults.conf srx110b-vb-factory.conf srx220h2-poe-factory.conf srx110b-wl-defaults.conf srx240-16xge-factory.conf srx110b-wl-factory.conf srx240-poe-16xge-factory.conf srx110h-defaults.conf srx240b-factory.conf srx110h-va-defaults.conf srx240b2-factory.conf srx110h-va-factory.conf srx240h-dc-defaults.conf srx110h-va-wl-defaults.conf srx240h-dc-factory.conf srx110h-va-wl-factory.conf srx240h-defaults.conf srx110h-vb-defaults.conf srx240h-factory.conf srx110h-vb-factory.conf srx240h-poe-defaults.conf srx110h-vb-wl-defaults.conf srx240h-poe-factory.conf srx110h-vb-wl-factory.conf srx240h2-dc-defaults.conf srx110h-wl-defaults.conf srx240h2-dc-factory.conf srx110h-wl-factory.conf srx240h2-defaults.conf srx110h2-va-defaults.conf srx240h2-factory.conf srx110h2-va-factory.conf srx240h2-poe-defaults.conf srx110h2-vb-defaults.conf srx240h2-poe-factory.conf srx110h2-vb-factory.conf srx550-6xge-factory.conf srx210-2xge-6xfe-factory.conf srx550-defaults.conf srx210-poe-2xge-6xfe-factory.conf srx550-factory.conf srx210b-defaults.conf srx650-4xge-factory.conf srx210b-factory.conf srx650-defaults.conf srx210be-defaults.conf srx650-factory.conf srx210be-factory.conf
- View the required default config file.
user@host> file show /etc/config/config file name
The following sample output displays the factory-default configuration on an SRX550 Services Gateway:
## ## $Id: $ ## ## Copyright (c) 2009-2011, Juniper Networks, Inc. ## All rights reserved. ## system { autoinstallation { delete-upon-commit; traceoptions { level verbose; flag { all; } } interfaces { ge-0/0/0 { bootp; } } } services { ssh; telnet; dhcp { router { 192.168.1.1; } pool 192.168.1.0/24 { address-range low 192.168.1.2 high 192.168.1.254; } propagate-settings ge-0/0/0.0; } web-management { http { interface [ vlan.0 ]; } https { system-generated-certificate; interface [ vlan.0 ]; } } xnm-clear-text; } name-server { 208.67.222.222; 208.67.220.220; } syslog { archive size 100k files 3; } } interfaces { ge-0/0/0 { unit 0; } ge-0/0/1 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/2 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/3 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/4 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/5 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } vlan { unit 0 { family inet { address 192.168.1.1/24; } } } } security { screen { ids-option untrust-screen { icmp { ping-death; } ip { source-route-option; tear-drop; } tcp { syn-flood { alarm-threshold 1024; attack-threshold 200; source-threshold 1024; destination-threshold 2048; timeout 20; } land; } } } zones { security-zone trust { host-inbound-traffic { system-services { all; } protocols { all; } } interfaces { vlan.0; } } security-zone untrust { interfaces { ge-0/0/0.0 { host-inbound-traffic { system-services { dhcp; tftp; } } } } screen untrust-screen; } } policies { from-zone trust to-zone untrust { policy trust-to-untrust { match { source-address any; destination-address any; application any; } then { permit; } } } } } vlans { vlan-trust { vlan-id 3; l3-interface vlan.0; } } protocols { stp; }