Step 2: Up and Running
Now that the SRX320 is powered on, let’s do some initial configuration to get it up and running on the network. It’s simple to provision and manage the SRX320 and other devices on your network. Choose the configuration tool that’s right for you:
J-Web, Juniper Networks Setup wizard that is preinstalled on the SRX320. We’ll show you how to do the initial configuration using J-Web.
Juniper Networks Advanced Threat Prevention (ATP) Cloud, Juniper Networks-hosted public cloud-based Software as a Service (SaaS) solution. You’ll need to have a Juniper ATP Cloud subscription service before you can use it to configure the SRX320. For more information, check out the Juniper Sky Enterprise Getting Started Guide.
Contrail Service Orchestration (CSO). To use CSO, you’ll need an authentication code. See the Contrail Service Orchestration (CSO ) Deployment Guide.
If you are using Junos OS Release 19.2 or earlier, you can use Juniper Networks Network Service Controller to configure the SRX320 with ZTP. Network Service Controller is a component of CSO. See Configure the Device Using ZTP with Juniper Networks Network Service Controller.
Configure Root Authentication
- Connect any of the SRX320 network ports numbered 0/1 through
0/6 to the Ethernet port on your laptop or PC.
Do not use ports 0/0 and 0/7.
The SRX320 functions as a DHCP server and automatically assigns the laptop or PC an IP address on the 192.168.1.0/24 network.
- If the laptop or PC is unable to get an IP address, manually
configure an IP address in the 192.168.1.0/24 network.
Be sure you don’t assign the IP address 192.168.1.1 to the laptop or PC, because this is the IP address assigned to the SRX320.
- Set the root authentication password:
- Open a browser and type https://192.168.1.1. The Phone Home Client page appears.
- Click Skip to J-Web at the
bottom of the screen. The Skip to J-Web page appears.
- Type a root authentication password and click Submit. The J-Web login page appears.
Plug and Play
The SRX320 already has factory-default settings configured right out of the box to make it a plug-and-play device. So all you have to do to get the SRX320 up and running is connect it to your LAN and WAN. Here’s how:
- Connect the WAN network to port 0/0.
- Connect the LAN network to any of the ports from 0/1 through port 0/6.
- Check to see if the SRX320 is connected to the Internet. Go to http://www.juniper.net. If the page doesn’t load, check the Internet connection.
Congratulations! Your SRX320 is now up and running on the network, and you can start using it right away!
Customize the Basic Configuration with J-Web
Now that you’ve configured basic settings for the SRX320, let’s go ahead and customize those settings for your network. Have this information handy before you begin:
IP address for the NTP server
IP address for the DNS server
IP address for the management interface
To customize the configuration in Junos OS Release 15.1X49-D170, see Customize the Configuration for Junos OS Release 15.1X49-D170.
Log in to J-Web and select the configuration mode that’s right for you. You can then follow the screens as they appear in the Setup wizard.
Standard—Configure basic security settings for the SRX320.
Cluster (HA)—Set up the SRX320 in chassis cluster mode.
Passive—Set up the SRX320 in Tap mode. Tap mode enables the SRX320 to passively monitor traffic flows across a network.