Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Device Login and Initial Configuration

This topic provides essential information to help you get started with the SRX400 firewall series. It guides you through the initial setup tasks required to bring the firewall online and ready for configuration using the Junos OS Evolved CLI.

Physical Setup Before Initial Configuration

Getting started with SRX400 firewall series configurations begins with initial setup using Junos OS Evolved CLI, after physical installation.

Before performing initial software configuration:

  1. Unpack and rack-mount the SRX400 firewall series using the provided brackets and rails.

  2. Ground the chassis with a 14 AWG grounding cable to an earth ground point, such as the rack in which you mount the firewall.

  3. Connect power supplies (AC or DC) and cables to external devices, ensuring proper routing to avoid hazards.

  4. Power on the device and verify startup.

Perform Initial Software Configuration

After you've physically installed the SRX400 firewall series, use HPE Networking Security Director Cloud with a valid license (HPE Networking Security Director Cloud Licensing Lifecycle and Software Licenses for Security Director), J-Web, or the Junos OS Evolved CLI to perform the initial software configuration.

Perform the initial software configuration using any of these methods:

  • HPE Networking Security Director Cloud: You can onboard the cloud-ready SRX400 firewall series to HPE Networking Security Director Cloud (SD Cloud) portal by scanning the device QR code with your mobile phone. The device is then automatically provisioned using secure zero-touch provisioning (SZTP). For more information, see Onboard Greenfield SRX Series Firewalls to Juniper Security Director Cloud Using QR Code.

  • J-Web: Connect the management (MGMT) port (re0:mgmt-0) on your device with a management interface IP (typically 192.168.1.1) for initial access. Use the Setup Wizard in standalone mode to configure the key settings like root password, hostname, management interface, zones, DNS, and gateways. Follow the instructions in Access the J-Web User Interface to how to start and access the J-Web user interface to configure your device.

  • Junos OS Evolved CLI: Connect through the console. Log in as root (default has no password on factory-default devices) and start the CLI with the cli commands.

    For example:

    Exit shell mode: If in shell (bash or Unix shell), type cli to return to operational CLI mode (prompt: root@srx400>). Enter configuration mode:

Initial Software Configuration Using Junos OS Evolved CLI

To perform initial software configuration on the SRX400 firewall series:

  1. Connect a management device to the serial console port as described in Perform Initial Software Configuration.

  2. Power on the device and wait for it to boot. The software boots automatically. When the boot process is complete, you'll see the login: prompt on the console.

  3. Log in as the root user and start the CLI.

    Initially, you won't need a password for the root user account. The device prompt root@% indicates that you are the root user.

  4. Set root password and management interface and commit from the CLI. This secures the root account and enables remote access.

    Learn how to Protect Network Security by Configuring the Root Password.

  5. If you need to revert the device to its original factory‑default state:

  6. Configure remote access.

    Remote management access to the device and all management access protocols such as Telnet and FTP are disabled by default.

  7. Enable SSH service.

    • Configure root authentication and optionally enable SSH root login during initial setup.

      Note: Factory-default setup allows initial root login through console (no password required)

    • Create a new user (for example, admin user with super-user privileges).

      In Junos OS Evolved, the root user cannot log in through SSH by default. To explicitly allow it, you must enable root login over SSH using the set system services ssh root-login allow command.

      After a separate user account has been created, this setting can be safely removed.

    • Disable root login through SSH. After you confirm, the new admin user can SSH in:

  8. Configure the IP address and prefix length for the management interface (re0:mgmt-0).

    After assigning the address, configure a default route for out‑of‑band management:

    [See SRX400 Firewall Hardware Guide and SRX440 Firewall Hardware Guide for instructions on how to connect to the management port.]