Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Step 2: Up and Running


Now that the SRX320 is powered on, let’s do some initial configuration to get it up and running on the network. It’s simple to provision and manage the SRX320 and other devices on your network. Choose the configuration tool that’s right for you:

  • J-Web, Juniper Networks Setup wizard that is preinstalled on the SRX320. We’ll show you how to do the initial configuration using J-Web.

  • Juniper Networks Advanced Threat Prevention (ATP) Cloud, Juniper Networks-hosted public cloud-based Software as a Service (SaaS) solution. You’ll need to have a Juniper ATP Cloud subscription service before you can use it to configure the SRX320. For more information, check out the Juniper Sky Enterprise Getting Started Guide.

  • Contrail Service Orchestration (CSO). To use CSO, you’ll need an authentication code. See the Contrail Service Orchestration (CSO ) Deployment Guide.

    If you are using Junos OS Release 19.2 or earlier, you can use Juniper Networks Network Service Controller to configure the SRX320 with ZTP. Network Service Controller is a component of CSO. See Configure the Device Using ZTP with Juniper Networks Network Service Controller.

  • CLI commands

Configure Root Authentication

  1. Connect any of the SRX320 network ports numbered 0/1 through 0/6 to the Ethernet port on your laptop or PC.Note

    Do not use ports 0/0 and 0/7.

    The SRX320 functions as a DHCP server and automatically assigns the laptop or PC an IP address on the network.

  2. If the laptop or PC is unable to get an IP address, manually configure an IP address in the network.

    Be sure you don’t assign the IP address to the laptop or PC, because this is the IP address assigned to the SRX320.

  3. Set the root authentication password:
    1. Open a browser and type The Phone Home Client page appears.
    2. Click Skip to J-Web at the bottom of the screen. The Skip to J-Web page appears.
    3. Type a root authentication password and click Submit. The J-Web login page appears.

Plug and Play

The SRX320 already has factory-default settings configured right out of the box to make it a plug-and-play device. So all you have to do to get the SRX320 up and running is connect it to your LAN and WAN. Here’s how:

  1. Connect the WAN network to port 0/0.
  2. Connect the LAN network to any of the ports from 0/1 through port 0/6.
  3. Check to see if the SRX320 is connected to the Internet. Go to If the page doesn’t load, check the Internet connection.

Congratulations! Your SRX320 is now up and running on the network, and you can start using it right away!

Customize the Basic Configuration with J-Web

Now that you’ve configured basic settings for the SRX320, let’s go ahead and customize those settings for your network. Have this information handy before you begin:

  • Hostname

  • IP address for the NTP server

  • IP address for the DNS server

  • IP address for the management interface


To customize the configuration in Junos OS Release 15.1X49-D170, see Customize the Configuration for Junos OS Release 15.1X49-D170.

Log in to J-Web and select the configuration mode that’s right for you. You can then follow the screens as they appear in the Setup wizard.

  • Standard—Configure basic security settings for the SRX320.

  • Cluster (HA)—Set up the SRX320 in chassis cluster mode.

  • Passive—Set up the SRX320 in Tap mode. Tap mode enables the SRX320 to passively monitor traffic flows across a network.