Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Step 2: Up and Running


Now that the SRX345 is powered on, let’s do some initial configuration to get it up and running on the network. It’s simple to provision and manage the SRX345 and other devices on your network. You can choose the configuration tool that’s right for you:

  • J-Web, Juniper Networks Setup wizard that is preinstalled on the SRX345. We walk you through the steps of how to do the initial configuration using J-Web.

  • Juniper Sky Enterprise, Juniper Networks-hosted public cloud-based Software as a Service (SaaS) solution. You’ll need to have a Juniper Sky Enterprise subscription service before you can use it to configure the SRX345. For more information, check out the Juniper Sky Enterprise Getting Started Guide.

  • Juniper Networks Contrail Service Orchestration (CSO). To use CSO, you’ll need an authentication code. See the Contrail Service Orchestration (CSO ) Deployment Guide.

    If you are using Junos OS Release 19.2 or earlier, you can use Juniper Networks Network Service Controller to configure the SRX345 with ZTP. Network Service Controller is a component of CSO. See Configure the Device Using ZTP with Juniper Networks Network Service Controller.

  • CLI commands

Configure Root Authentication

  1. Connect the management port (MGMT) on the SRX345 front panel to the Ethernet port on your laptop.

    The SRX345 functions as a DHCP server and automatically assigns the laptop an IP address on the network.

  2. If the laptop is unable to acquire an IP address, manually configure an IP address in the network.

    Be sure you don’t assign the IP address to the laptop, because this is the IP address assigned to the SRX345.

  3. Set the root authentication password:
    1. Open a browser and type The Phone Home Client page appears.
    2. Click Skip to J-Web at the bottom of the screen. The Skip to J-Web page appears.
    3. Type a root authentication password and click Submit. The J-Web login page appears.

Plug and Play

The SRX345 already has factory-default settings configured right out of the box to make it a plug-and-play device. So all you have to do to get the SRX345 up and running is connect it to your LAN and WAN. Here’s how:

  1. Connect the WAN to port 0/0.
  2. Connect the LAN to any of the ports from 0/1 through 0/14.
  3. Check whether the SRX345 is connected to the Internet. Go to If the webpage doesn’t load, check the Internet connection.

After you complete these steps, you can start using the SRX345 on your network right away. You can go back and customize settings anytime. The J-Web Setup wizard is always available to you.

Customize the Basic Configuration

Now that you’ve configured basic settings for the SRX345, let’s go ahead and customize those settings for your network. You’ll need this information to do so:

  • Hostname

  • IP address for the NTP server

  • IP address for the DNS server

  • IP address for the management interface


To customize the configuration in Junos OS Release 15.1X49-D170, see Customize the Configuration for Junos OS Release 15.1X49-D170.

Log in to J-Web and select the configuration mode that’s right for you. You can then follow the screens as they appear in the Setup wizard.

  • Standard—Configure basic security settings for the SRX345.

  • Cluster (HA)—Set up the SRX345 in chassis cluster mode.

  • Passive—Set up the SRX345 in Tap mode. Tap mode enables the SRX345 to passively monitor traffic flows across a network.