Step 2: Up and Running
In addition to the device CLI, you can also onboard and manage the SRX4600 by using
Juniper Routing Director (formerly Juniper Paragon Automation). See Onboard Devices to
Juniper Routing Director on the Juniper Routing Director Documentation page.
Set Parameter Values
You must perform the initial configuration of the device through the console port.
Before you begin, set the following parameter values in the console server or the
management host:
-
Baud Rate—9600
-
Flow Control—None
-
Data—8
-
Parity—None
-
Stop Bits—1
-
DCD State—Disregard
Perform the Initial Configuration
To connect and configure the Firewall from the
console:
-
Connect the console port (CON), located on the front panel of the
SRX4600 to a laptop or PC by using the provided RJ-45 cable and RJ-45 to
DB-9 serial port adapter (not provided).
-
Log in as root. There is no password. If the
software booted before you connected to the console port, you might need to
press the Enter key for the prompt to appear.
-
Start the CLI.
-
Enter configuration mode.
-
Set the root authentication password by entering either a cleartext
password, an encrypted password, or an SSH public key string (DSA or
RSA):
[edit]
root@# set system root-authentication plain-text-password
New password: password
Retype new password: password
-
Configure an administrator account on the device. When prompted, enter the
password for the administrator account:
[edit]
root@# set system login user admin class super-user authentication plain-text-password
New password: password
Retype new password: password
-
Commit the configuration to activate it on the device:
-
Log in as the administrative user you configured in Step 6.
-
(Optional) Configure the name of the device. If the name includes spaces,
enclose the name in quotation marks (“ ”):
[edit]
admin@# set system host-name host-name
-
Configure the IP address and prefix length for the management interface on
the Firewall.
[edit]
admin@# set interfaces fxp0 unit 0 family inet address address/prefix-length
-
Configure the default route.
[edit]
admin@# set routing-options static route 0.0.0.0/0 next-hop gateway
-
Check the configuration for validity:
[edit]
admin@# commit check
-
Commit the configuration to activate it on the device: