Juniper SRX650 Quick Start

SRX650 Services Gateway Quick Start
Use the instructions in this quick start to help you connect the SRX650 Services
Gateway to your network. For details, see the SRX650 Services Gateway Hardware
Guide at http://www.juniper.net/techpubs/hardware/junos-srx/srx650/index.html.
SRX650 Services Gateway Front Panel
2 4 6
1
3 5
650
12
8
11
9 10
Callout Description Callout
1 Mounting brackets 7
2 ALARM LED 8
3 FAN LED 9
4 SRE/ACE LED 1.0 10
5 ESD outlet 11
6 10/100/1000 Ethernet ports 12
SRX650 Services Gateway Back Panel
1 2
DC OK AC OK
6 7
7
Description
GPIM/XPIM slots
POWER LED
HA SYS LED
SRE/ACE LED 0 (applies to Services and
Routing Engine models only)
SRE/ACE LED 1.1
Power button
4
3
8 9 10 11
Callout Description
1 Power supply slots
2 Multi-use processing slot
3 SRE slot 0 (shown with Services and
Routing Engine model installed)
4 Fan tray
5 Air filter (behind fan tray)
6 Reset Config button
Connecting and Configuring the SRX Series Device
Use the instructions below to connect and set up the SRX650 Services Gateway to
protect your network. Refer to the LEDs on the front and back panels of the device to
help you determine the status of the device.
Task 1: Overview
The SRX650 Services Gateway is a security device that requires these basic
configuration settings to function:
Interfaces must be assigned IP addresses.
n
Interfaces must be bound to zones.
n
All interfaces must be configured as Layer 3 interfaces.
n
Policies must be configured between zones to permit or deny traffic.
n
Source NAT rules must be set.
n
The device has the following default configuration set when you power it on for the first
time. To be able to use the device, you do not need to perform any initial configuration.
Factory-Default Settings:
Interface Security Zone
ge-0/0/0 Untrust
ge-0/0/1 Trust
5
ge-0/0/2 Trust
ge-0/0/3 Trust
Factory-Default Settings for Security Policies:
Source Zone
T u r t s
Factory-Default Settings for NAT Rule:
Source Zone
T u r t s
Callout Description
7 SRE LEDs
8 AUX port
9 Console port
10 External CompactFlash slot
11 2 USB ports
DHCP State IP Address
Client Dynamically assigned
Server 192.168.1.1/24
Server 192.168.2.1/24
Server 192.168.3.1/24
Destination Zone Policy Action
U t n u r t s P r e m t i
Destination Zone Policy Action
U t n u r t s
Source NAT to untrust zone interface