Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Dual CT1/E1 GPIM Basic Configuration

 

To enable the Dual CT1/E1 Gigabit-Backplane Physical Interface Module (GPIM) installed on your SRX Series Services Gateway, you must configure the basic settings for the PIM. You can perform the configuration tasks for this using either the J-Web interface or the CLI.

Using the J-Web Interface

To perform basic configuration for the Dual CT1/E1 GPIM and to configure network interfaces for the services gateway using the J-Web interface:

  1. In the J-Web interface, select Configure>Interfaces>Ports.

    The Interfaces page lists the network interfaces present on the services gateway. Verify whether the interface has been configured by reviewing the information in the Configured column (yes/no).

  2. Select the name of the parent interface you want to edit. Note

    You must configure the parent CT1 or CE1 interface before you configure the child T1 or E1 interface, respectively.

  3. From the CT1/CE1 Interfaces General Configuration page, for the parent CT1 or CE1 interface, select no for the Partitioning field.
  4. Click OK to save changes.
  5. Select the name of the child interface (T1 or E1) you want to edit.
  6. To use the port on the GPIM, you must assign it to a security zone other than the Null zone. Optionally, you can also assign the port an IP address (for example, 192.168.3.1/24). Enter or select the following settings:
    1. Select Configure>Security>Zones.
    2. Add or select a security zone other than Null; for example, Trust.
    3. For host inbound traffic, set the following:
      • System Services=Allow All

      • Protocols=Allow All

    4. Click OK to save changes, and click Commit to apply the configuration and other pending changes (if any).
  7. To use the port on the GPIM, you must also set security policies. Select the following settings:
    1. Select Configure>Security>Policy>Apply Policy.
    2. Set Policy Action: Default Policy Action=Permit-All.
    3. Click OK to save changes, and click Commit to apply the configuration and other pending changes (if any).

For advanced configuration information, see the Junos OS Network Interfaces Configuration Guide.

Using the CLI to Configure the CT1 Interface

To perform basic configuration for the Dual CT1/E1 GPIM (for the CT1 interface) and to configure network interfaces for the services gateway with the CLI:

Note

You must configure the parent CT1 interface before you can configure the child T1 interface.

  • Verify that the Dual CT1/E1 GPIM is installed on the services gateway:

    show chassis hardware

  • Verify the FPC status of the interface:

    show chassis fpc

  • Configure the parent CT1 interface with no partitioning:

    set interfaces ct1-3/0/0 no-partition interface-type t1

  • Configure the child T1 interface and assign an IP address:

    set interfaces t1-3/0/0 unit 0 family inet address ip4–address/prefix

  • Assign MTU values to the child T1 interface:

    set interfaces t1-3/0/0 unit 0 mtu mtu values

  • Configure a security zone for the child T1 interface and set the configuration for host inbound traffic services and protocols:

    set security zones security-zone trust interfaces t1-3/0/0 host-inbound-traffic system-services all

    set security zones security-zone trust interfaces t1-3/0/0 host-inbound-traffic protocols all

  • Set security policies:

    set security policies default-policy permit-all

Using the CLI to Configure the CE1 Interface

To perform basic configuration for the Dual CT1/E1 GPIM (for the CE1 interface) and to configure network interfaces for the services gateway with the CLI:

Note

You must configure the parent CE 1 interface before you can configure the child E1 interface.

  • Verify that the Dual CT1/E1 GPIM is installed on the services gateway:

    show chassis hardware

  • Verify the FPC status of the interface:

    show chassis fpc

  • Configure the parent CE1 interface with no partitioning:

    set interfaces ce1-3/0/0 no-partition interface-type e1

  • Configure the child E1 interface and assign an IP address:

    set interfaces e1-3/0/0 unit 0 family inet address ip4–address/prefix

  • Assign MTU values to the child E1 interface:

    set interfaces e1-3/0/0 unit 0 mtu mtu values

  • Configure a security zone for the child E1 interface and set the configuration for host inbound traffic services and protocols:

    set security zones security-zone trust interfaces e1-3/0/0 host-inbound-traffic system-services all

    set security zones security-zone trust interfaces e1-3/0/0 host-inbound-traffic protocols all

  • Set security policies:

    set security policies default-policy permit-all