SRX1400 Services Gateway Getting Started Guide

Juniper Networks

SRX1400 Services Gateway Getting Started Guide - Juniper ...

Remove Components from the Chassis for Manual Lifting of the SRX1400 Services. Gateway on page 19. • Lift the SRX1400 Services Gateway ...

Google Docs
Google Drive
Download [pdf]

File Info : application/pdf, 40 Pages, 2.13MB

srx1400-getting-started-guide

SRX1400 Services Gateway Getting Started Guide

June 2016 Part Number: 530-071199 Revision 01

Contents

About This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Document Organization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Safety Recommendations Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 SRX1400 Services Gateway Definition of Safety Warning Levels . . . . . . . . . . . 4 SRX1400 Services Gateway General Safety Guidelines and Warnings . . . . . . 6
Introduction to the SRX1400 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 SRX1400 Services Gateway Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 SRX1400 Services Gateway Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 SRX1400 Services Gateway Chassis Specifications . . . . . . . . . . . . . . . . . . . . . 8 SRX1400 Services Gateway Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 SRX1400 Services Gateway Back Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Step 1: Prepare the Site for SRX1400 Services Gateway Installation . . . . . . . . . . . 11 Site Preparation Checklist for SRX1400 Services Gateway . . . . . . . . . . . . . . . 11 SRX1400 Services Gateway Rack Requirements . . . . . . . . . . . . . . . . . . . . . . . 12
Step 2: Unpack the SRX1400 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Unpack the SRX1400 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Verify Parts Received with the SRX1400 Services Gateway . . . . . . . . . . . . . . 15
Step 3: Install the SRX1400 Services Gateway Mounting Hardware . . . . . . . . . . . 17 Step 4: Install the SRX1400 Services Gateway in a Rack . . . . . . . . . . . . . . . . . . . . 17
Install the SRX1400 Services Gateway in a Rack Manually (Without a Mechanical Lift) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Remove Components from the Chassis for Manual Lifting of the SRX1400 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Lift the SRX1400 Services Gateway Chassis into the Rack . . . . . . . . . . . 19 Reinstall Components into the SRX1400 Services Gateway Chassis . . . 21
Step 5: Connect the External Devices and IOC Cables to the SRX1400 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Connect the SRX1400 Services Gateway to a Network for Out-of-Band Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Connect the SRX1400 Services Gateway to a Management Console . . . . . . 22

SRX1400 Services Gateway Getting Started Guide
Connect the Ethernet Network Cables to the SRX1400 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Step 6: Connect the Ground and Power Cables . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 Connect the Grounding Cable to the SRX1400 Services Gateway . . . . . . . . . 25 Connect Power to an AC-Powered SRX1400 Services Gateway . . . . . . . . . . 26 Connect Power to a DC-Powered SRX1400 Services Gateway . . . . . . . . . . . 29 Power On the SRX1400 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 Power Off the SRX1400 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Step 7: Perform the Initial Software Configuration on the SRX1400 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 SRX1400 Services Gateway Software Configuration Overview . . . . . . . . . . . 32 Perform Initial Software Configuration on the SRX1400 Services Gateway (CLI Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Step 8: Monitor the SRX1400 Services Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . 37 SRX1400 Services Gateway Compliance Statements for EMC Requirements . . . 37
Canada . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 European Community . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Japan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 United States . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 SRX Series Documentation and Release Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Requesting Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Self-Help Online Tools and Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Opening a Case with JTAC . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Revision History . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

About This Guide

This guide contains the basic information you need to install and configure the SRX1400 Services Gateway quickly. For complete installation instructions, and instructions for installing additional modules such as cards and power supplies, see the SRX1400 Services Gateway hardware documentation at www.juniper.net/techpubs/.

· Document Organization on page 3

Document Organization
The SRX1400 Services Gateway Getting Started Guide provides background information and step-by-step instructions for getting started with the SRX1400 Services Gateway.

Table 1 on page 3 summarizes the information included in each topic of this guide.

Table 1: SRX1400 Services Gateway Document Organization

Topic

Contents

"Safety Recommendations Before You Begin" on page 4

Provides important safety recommendations and considerations for you to be aware of before you attempt to install the services gateway.

"Introduction to the SRX1400 Services Gateway" on page 7

Describes the SRX1400 Services Gateway and summarizes the available models. It includes physical specifications about the chassis and provides information about the components on the front and back panels.

"Step 1: Prepare the Site for SRX1400 Services Gateway Installation" on page 11

Provides a site preparation checklist, rack requirements, and instructions for connecting the services gateway to the building structure.

"Step 2: Unpack the SRX1400 Services Gateway" on page 13

Explains how to unpack the services gateway and lists the required tools. It includes a list of components and accessories shipped with the services gateway for you to verify.

"Step 3: Install the SRX1400 Services

Describes the specific mounting hardware required

Gateway Mounting Hardware" on page 17 for installing the device in a rack.

"Step 4: Install the SRX1400 Services Gateway in a Rack" on page 17

Provides a step-by-step procedure for installing the services gateway.

"Step 5: Connect the External Devices and IOC Cables to the SRX1400 Services Gateway" on page 21

Describes how to connect the external devices and I/O card (IOC) cables to the services gateway.

"Step 6: Connect the Ground and Power Cables" on page 24

Describes how to connect, ground, and power on the services gateway.

SRX1400 Services Gateway Getting Started Guide

Table 1: SRX1400 Services Gateway Document Organization (continued)

Topic

Contents

"Step 7: Perform the Initial Software Configuration on the SRX1400 Services Gateway" on page 32

Describes how to perform initial software configuration using the CLI.

"Step 8: Monitor the SRX1400 Services Gateway" on page 37

Describes how to monitor the services gateway using LEDs and chassis alarm conditions.

"SRX1400 Services Gateway Compliance Statements for EMC Requirements" on page 37

Presents EMC compatibility compliance statements.

For more information, see the SRX1400 Services Gateway hardware documentation at www.juniper.net/techpubs/.
Safety Recommendations Before You Begin
This topic provides important safety recommendations and considerations for you to review before you attempt to install the services gateway. It contains the following sections:
· SRX1400 Services Gateway Definition of Safety Warning Levels on page 4 · SRX1400 Services Gateway General Safety Guidelines and Warnings on page 6
SRX1400 Services Gateway Definition of Safety Warning Levels
This guide uses the following levels of safety warnings:

NOTE: You might find this information helpful in a particular situation or might otherwise overlook it.

CAUTION: You need to observe the specified guidelines to avoid minor injury or discomfort to you or severe damage to the services gateway.

WARNING: This symbol alerts you to the risk of personal injury from a laser.

WARNING: This symbol means danger. You are in a situation that could cause bodily injury. Before you work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents.

SRX1400 Services Gateway Definition of Safety Warning Levels
Waarschuwing Dit waarschuwingssymbool betekent gevaar. U verkeert in een situatie die lichamelijk letsel kan veroorzaken. Voordat u aan enige apparatuur gaat werken, dient u zich bewust te zijn van de bij elektrische schakelingen betrokken risico's en dient u op de hoogte te zijn van standaard maatregelen om ongelukken te voorkomen.
Varoitus Tämä varoitusmerkki merkitsee vaaraa. Olet tilanteessa, joka voi johtaa ruumiinvammaan. Ennen kuin työskentelet minkään laitteiston parissa, ota selvää sähkökytkentöihin liittyvistä vaaroista ja tavanomaisista onnettomuuksien ehkäisykeinoista.
Attention Ce symbole d'avertissement indique un danger. Vous vous trouvez dans une situation pouvant causer des blessures ou des dommages corporels. Avant de travailler sur un équipement, soyez conscient des dangers posés par les circuits électriques et familiarisez-vous avec les procédures couramment utilisées pour éviter les accidents.
Warnung Dieses Warnsymbol bedeutet Gefahr. Sie befinden sich in einer Situation, die zu einer Körperverletzung führen könnte. Bevor Sie mit der Arbeit an irgendeinem Gerät beginnen, seien Sie sich der mit elektrischen Stromkreisen verbundenen Gefahren und der Standardpraktiken zur Vermeidung von Unfällen bewußt.
Avvertenza Questo simbolo di avvertenza indica un pericolo. La situazione potrebbe causare infortuni alle persone. Prima di lavorare su qualsiasi apparecchiatura, occorre conoscere i pericoli relativi ai circuiti elettrici ed essere al corrente delle pratiche standard per la prevenzione di incidenti.
Advarsel Dette varselsymbolet betyr fare. Du befinner deg i en situasjon som kan føre til personskade. Før du utfører arbeid på utstyr, må du vare oppmerksom på de faremomentene som elektriske kretser innebærer, samt gjøre deg kjent med vanlig praksis når det gjelder å unngå ulykker.
Aviso Este símbolo de aviso indica perigo. Encontra-se numa situação que lhe poderá causar danos físicos. Antes de começar a trabalhar com qualquer equipamento, familiarize-se com os perigos relacionados com circuitos eléctricos, e com quaisquer práticas comuns que possam prevenir possíveis acidentes.
¡Atención! Este símbolo de aviso significa peligro. Existe riesgo para su integridad física. Antes de manipular cualquier equipo, considerar los riesgos que entraña la corriente eléctrica y familiarizarse con los procedimientos estándar de prevención de accidentes.
Varning! Denna varningssymbol signalerar fara. Du befinner dig i en situation som kan leda till personskada. Innan du utför arbete på någon utrustning måste du vara medveten om farorna med elkretsar och känna till vanligt förfarande för att förebygga skador.

SRX1400 Services Gateway Getting Started Guide
Related · SRX1400 Services Gateway General Safety Guidelines and Warnings on page 6 Documentation
SRX1400 Services Gateway General Safety Guidelines and Warnings
The following guidelines help ensure your safety and protect the services gateway from damage. The list of guidelines might not address all potentially hazardous situations in your working environment, so be alert and exercise good judgment at all times.
· Perform only the procedures explicitly described in this guide. Make sure that only authorized service personnel perform other system services.
· Keep the area around the chassis clear and free from dust before, during, and after installation.
· Keep tools away from areas where people could trip on them. · Do not wear loose clothing or jewelry, such as rings, bracelets, or chains, which could
become caught in the chassis. · Wear safety glasses if you are working under any conditions that could be hazardous
to your eyes. · Do not perform any actions that create a potential hazard to people or that make the
equipment unsafe. · Never attempt to lift an object that is too heavy for one person to handle. · Never install or manipulate wiring during electrical storms. · Never install electrical jacks in wet locations unless the jacks are specifically designed
for wet environments. · Operate the services gateway only when it is properly grounded. · Do not open or remove chassis covers or sheet metal parts unless instructions are
provided in this guide. Such an action could cause severe electrical shock. · Do not push or force any objects through any opening in the chassis frame. Such an
action could result in electrical shock or fire. · Avoid spilling liquid onto the services gateway chassis or onto any services gateway
component. Such an action could cause electrical shock or could damage the services gateway. · Avoid touching uninsulated electrical wires or terminals that have not been disconnected from their power source. Such an action could cause electrical shock.
Related · SRX1400 Services Gateway Definition of Safety Warning Levels on page 4 Documentation
· Site Preparation Checklist for SRX1400 Services Gateway on page 11

Introduction to the SRX1400 Services Gateway

Introduction to the SRX1400 Services Gateway
This topic includes the following sections:
· SRX1400 Services Gateway Description on page 7 · SRX1400 Services Gateway Models on page 7 · SRX1400 Services Gateway Chassis Specifications on page 8 · SRX1400 Services Gateway Front Panel on page 9 · SRX1400 Services Gateway Back Panel on page 11
SRX1400 Services Gateway Description
Juniper Networks SRX1400 Services Gateway expands the SRX Series family of next-generation security platforms, delivering performance and service integration to environments that require the features without the massive scalability and aggregated throughput provided by Juniper Networks SRX3000 line and SRX5000 line. The SRX1400 Services Gateway provides firewall support with key features such as IP Security (IPsec), virtual private network (VPN), and high-speed deep packet inspection features such as Intrusion Detection and Prevention (IDP). The SRX1400 device is suited for small to medium data centers, enterprises, and service provider network security deployments where consolidation of security functionality, uncompromised performance, and compact environmental footprint are requirements.
The SRX1400 Services Gateway runs the Junos operating system (Junos OS).
Related · SRX1400 Services Gateway Models on page 7 Documentation
· SRX1400 Services Gateway Chassis Specifications on page 8 · SRX1400 Services Gateway Front Panel on page 9 · SRX1400 Services Gateway Back Panel on page 11

SRX1400 Services Gateway Models

The SRX1400 Services Gateway is available in four models, which are listed in Table 2 on page 7.

Table 2: SRX1400 Services Gateway Models

Model Number

Device Type

SRX1400BASE-GE-AC

SRX1400 Services Gateway with 1-Gigabit Ethernet System I/O card (SYSIOC), and AC power supply

SRX1400BASE-GE-DC

SRX1400 Services Gateway with 1-Gigabit Ethernet SYSIOC, and DC power supply

SRX1400BASE-XGE-AC

SRX1400 Services Gateway with 10-Gigabit Ethernet SYSIOC, and AC power supply

SRX1400 Services Gateway Getting Started Guide

Table 2: SRX1400 Services Gateway Models (continued)

Model Number

Device Type

SRX1400BASE-XGE-DC

SRX1400 Services Gateway with 10-Gigabit Ethernet SYSIOC, and DC power supply

NOTE: The SRX1400 Services Gateway base models include the Routing Engine, SYSIOC, and power supply. The Network and Services Processing Card (NSPC) and IOCs are not provided with the SRX1400 Services Gateway base models. You must order them separately. Contact your Juniper Networks customer service representative for more information.
Related · SRX1400 Services Gateway Description on page 7 Documentation
· SRX1400 Services Gateway Chassis Specifications on page 8
SRX1400 Services Gateway Chassis Specifications
Figure 1 on page 8 shows the SRX1400 Services Gateway chassis.
Figure 1: SRX1400 Services Gateway Chassis

g033500

Table 3 on page 8 lists the chassis specifications for the SRX1400 Services Gateway chassis.

Table 3: SRX1400 Services Gateway Physical Specifications

Specification

Value

Chassis height

5.25 in. (13.3 cm), 3 rack units (U)

Chassis width

17.5 in. (44.5 cm)

Chassis depth

13.8 in. (35.05 cm)

SRX1400 Services Gateway Front Panel

Table 3: SRX1400 Services Gateway Physical Specifications (continued)

Specification

Value

Chassis weight

· Base chassis: 29.3 lb (13.3 kg) · Fully configured chassis: 42.5 lb (19.3 kg)

The SRX1400 Services Gateway is 3 U tall. Sixteen devices can be stacked in a single floor-to-ceiling rack, for increased port density per unit of floor space.

The device provides common form-factor module (CFM) slots that you can populate with the following cards:

· Double-wide NSPC in adjacent CFM slots 1 and 3 · IOC, SPC, or NP-IOC in slot CFM 2

For detailed information about the modules supported by the services gateway, see the SRX1400, SRX3400, and SRX3600 Services Gateway Module Guide at www.juniper.net/techpubs/.

The device also has one dedicated slot for a SYSIOC, one dedicated slot for the Routing Engine, two slots for power supplies, and one slot for the fan tray and air filter.

Table 4 on page 9 lists the minimum system configuration for the SRX1400 Services Gateway.

Table 4: SRX1400 Services Gateway Minimum System Configuration

Component

Minimum

NSPC

Routing Engine

SYSIOC

Power supply

Fan tray

Related · SRX1400 Services Gateway Models on page 7 Documentation
· SRX1400 Services Gateway Front Panel on page 9
· SRX1400 Services Gateway Back Panel on page 11

SRX1400 Services Gateway Front Panel
Figure 2 on page 10 shows the front panel of the SRX1400 Services Gateway.

SRX1400 Services Gateway Getting Started Guide

Figure 2: SRX1400 Services Gateway Front Panel

g033501

Table 5 on page 10 lists the components on the front panel of the services gateway.

Table 5: SRX1400 Services Gateway Components on the Front Panel

Number

Component

Network and Services Processing Card (NSPC) in adjacent CFM slots

1 and 3

Routing Engine

System I/O card (SYSIOC)

CFM slot 2

5 and 6

Power supply

Related · SRX1400 Services Gateway Description on page 7 Documentation
· SRX1400 Services Gateway Chassis Specifications on page 8
· SRX1400 Services Gateway Back Panel on page 11

SRX1400 Services Gateway Back Panel
SRX1400 Services Gateway Back Panel
Figure 3 on page 11 shows the back panel of the SRX1400 Services Gateway.
Figure 3: SRX1400 Services Gateway Back Panel

g033502

Table 6 on page 11 lists the components on the back panel of the SRX1400 Services Gateway.

Table 6: SRX1400 Services Gateway Components on the Back Panel

Number

Component

Fan tray assembly

Related · SRX1400 Services Gateway Front Panel on page 9 Documentation
· SRX1400 Services Gateway Description on page 7

Step 1: Prepare the Site for SRX1400 Services Gateway Installation

This topic describes site preparation and services gateway rack requirements. It includes the following sections:

· Site Preparation Checklist for SRX1400 Services Gateway on page 11 · SRX1400 Services Gateway Rack Requirements on page 12

Site Preparation Checklist for SRX1400 Services Gateway

Table 7 on page 11 summarizes the tasks you need to perform when you are preparing a site for installing the SRX1400 Services Gateway.

Table 7: Site Preparation Checklist

Item or Task

Performed

Date

Verify that environmental factors such as temperature and humidity do not exceed services gateway tolerances.

Select the type of rack.

SRX1400 Services Gateway Getting Started Guide

Table 7: Site Preparation Checklist (continued)
Item or Task

Performed

Date

Plan rack location, including required space clearances.

If a rack will be used, secure it to the floor and building structure.

Obtain cables and connectors.

Locate sites for connection of system grounding.

Measure the distance between the external power sources and the device installation site.

Calculate the optical power budget and optical power margin.

For more information, see the SRX1400 Services Gateway hardware documentation at www.juniper.net/techpubs/.
Related · SRX1400 Services Gateway Rack Requirements on page 12 Documentation
· SRX1400 Services Gateway General Safety Guidelines and Warnings on page 6

SRX1400 Services Gateway Rack Requirements

The SRX1400 Services Gateway can be installed in a rack. Many types of racks are acceptable, including open-frame racks and four-post (telco) racks. However, front-mounting the SRX1400 Services Gateway in a two-post rack is the preferred method of installation.

Table 8 on page 12 describes the rack requirements for the services gateway.

Table 8: SRX1400 Services Gateway Rack Requirements

Rack Requirement

Specification

Size

The device is designed for installation into a 19-in. (48.26 cm) rack as defined in Cabinets, Racks, Panels, and Associated Equipment (document number EIA-310D) published by the Electronics Industry Association (http://www.eia.org).

Strength

The rack must be strong enough to support the weight of the fully configured device, up to 41.8 lb (19.3 kg).
If you stack 8 fully configured devices in one rack, it must be capable of supporting up to 340.4 lb (154.4 kg).

Step 2: Unpack the SRX1400 Services Gateway

Table 8: SRX1400 Services Gateway Rack Requirements (continued)

Rack Requirement

Specification

Spacing of the mounting bracket holes

The device can be mounted in any rack that provides holes or hole patterns spaced at 1U (1.75 in.) increments.
The mounting brackets used to attach the chassis to a rack are designed to fasten to holes spaced at those distances.

Connect to the building structure

Always secure the rack to the structure of the building. If your geographical area is subject to earthquakes, bolt the rack to the floor.
For maximum stability, also secure the rack to ceiling brackets.

Clearance for airflow

From the front of the chassis, there is a single air intake on the left side of the services gateway. Air is pushed from the fan tray through the air filter and then to the card cage. The air is exhausted out the right of the system.
For the cooling system to function properly, the airflow around the chassis must be unrestricted.
Allow at least 6 in. (15.2 cm) of horizontal clearance between devices.
Allow 5 in. (13 cm) between the side of the chassis and any non-heat-producing surface, such as a wall.
When you are installing the services gateway in a cabinet, allow at least 3 in. (7.6 cm) of vertical clearance between the top and bottom of the services gateway and other devices in the cabinet.

Clearance for hardware maintenance

For service personnel to remove and install hardware components, there must be adequate space at the front and back of the services gateway.
At least 29.9 in. (76 cm) is required in front of the device, and at least 24 in. (61 cm) is required behind the device. NEBS GR-63 recommends that you allow at least 30 in. (72.6 cm) in front of the rack and 24 in. (61 cm) behind the rack.

For more information on the rack requirements, see the SRX1400 Services Gateway hardware documentation at www.juniper.net/techpubs/.
Related · Site Preparation Checklist for SRX1400 Services Gateway on page 11 Documentation
· SRX1400 Services Gateway Chassis Specifications on page 8 · Unpack the SRX1400 Services Gateway on page 14

Step 2: Unpack the SRX1400 Services Gateway
This topic explains how to unpack the services gateway. It includes a list of components and accessories that are shipped with the services gateway for you to verify. · Unpack the SRX1400 Services Gateway on page 14 · Verify Parts Received with the SRX1400 Services Gateway on page 15

SRX1400 Services Gateway Getting Started Guide
Unpack the SRX1400 Services Gateway
You need a Phillips (+) screwdriver, number 2, to unpack the services gateway. To unpack the services gateway: 1. Move the shipping carton to a staging area as close to the installation site as possible,
where you have enough room to remove the components from the chassis. 2. Position the shipping carton with the arrows pointing up. 3. Remove the plastic handle inserts and lift the cardboard cover off the device. 4. Remove the foam covering the top of the services gateway. Figure 4 on page 14
illustrates how to unpack the services gateway. 5. Remove the accessory box and the SRX1400 Services Gateway Getting Started Guide.
Figure 4: Unpack the SRX1400 Services Gateway

g033512

6. With a person on each side of the carton, carefully lift the device from the carton and place it on a flat, level surface. Remove the bag covering the device.
7. Verify the parts received against the list provided in "Verify Parts Received with the SRX1400 Services Gateway" on page 15.
8. Save the carton and the packing materials in case you need to move or ship the services gateway at a later time.

Verify Parts Received with the SRX1400 Services Gateway

NOTE: At the time of shipment, the adjacent CFM slots 1 and 3 are covered with a filler cover and slot 2 is covered with a blank panel. Save the filler cover and the blank panel after removing them from the slots, in case you need them when you pack or move the chassis at a later time. The filler cover is bare metal, without a colored overlay.
9. Proceed to install the services gateway.
Related · Install the SRX1400 Services Gateway Mounting Hardware in a Rack on page 17 Documentation
· SRX1400 Services Gateway Rack Requirements on page 12 · Site Preparation Checklist for SRX1400 Services Gateway on page 11 · Verify Parts Received with the SRX1400 Services Gateway on page 15 · SRX1400 Services Gateway General Safety Guidelines and Warnings on page 6
Verify Parts Received with the SRX1400 Services Gateway
The parts shipped with your device can vary, depending on the configuration you ordered.

NOTE: If any part is missing, contact your Juniper Networks customer service representative.

A fully configured services gateway contains the chassis with installed components, listed in Table 9 on page 15, and an accessory box, which contains the parts listed in Table 10 on page 16.

Table 9: Parts List for a Fully Configured SRX1400 Services Gateway

Component

Quantity

Chassis, including backplane, and rack-mounting 1 brackets

NSPC

Routing Engine

SYSIOC

Power supplies

1 and up to 2

Fan tray

Air filter

SRX1400 Services Gateway Getting Started Guide

Table 9: Parts List for a Fully Configured SRX1400 Services Gateway (continued)

Component

Quantity

Cover for empty CFM slot AC power cord

· 1 filler cover for the adjacent CFM slots 1 and 3 NOTE: The filler cover does not have a colored overlay.
· 1 blank panel for the CFM slot 2
1

NOTE: The NSPC is not a part of the base chassis configuration. You must order it separately. Contact your Juniper Networks customer service representative for more information.

Table 10: Accessory Box Parts List
Part

Quantity

Rack mount kit

RJ-45-to-DB-9 cable to connect the services gateway through the serial port 1

Juniper Networks Product Warranty

End User License Agreement

SRX1400 Services Gateway Getting Started Guide

Documentation Information Card

Product Registration

Juniper Compliance Form Letter; Reduction of Hazardous Substances (RoHS) 1

Document sleeve

ESD wrist strap with cable

Related · Unpack the SRX1400 Services Gateway on page 14 Documentation
· Install the SRX1400 Services Gateway Mounting Hardware in a Rack on page 17

Step 3: Install the SRX1400 Services Gateway Mounting Hardware
Step 3: Install the SRX1400 Services Gateway Mounting Hardware
The specific mounting hardware used depends on the type of rack you are using. Follow the appropriate steps for your rack to install the mounting hardware. To install the mounting hardware: 1. Locate the rack-mounting brackets in the accessory kit. 2. Position a mounting bracket on each side of the chassis. You can position the brackets
in front-mount or rear-mount position. 3. Use the screws provided to secure the rack-mounting brackets to the sides of the
chassis as shown in Figure 5 on page 17.
Figure 5: Attaching Mounting Brackets to the SRX1400 Services Gateway

g033513

Related · Unpack the SRX1400 Services Gateway on page 14 Documentation
· Verify Parts Received with the SRX1400 Services Gateway on page 15 · Install the SRX1400 Services Gateway in a Rack Manually (Without a Mechanical Lift)
on page 18 · SRX1400 Services Gateway General Safety Guidelines and Warnings on page 6
Step 4: Install the SRX1400 Services Gateway in a Rack
You can front-mount or rear-mount the services gateway in a two-post rack, a four-post rack, or a cabinet. The device can be installed manually or by using a mechanical lift.
This topic provides a step-by-step procedure for installing the device in a two-post rack without using a mechanical lift, which is the most common method for installing the service gateway.
For instructions on installing the device in a two-post rack, four-post rack, or a cabinet using a mechanical lift, see the SRX1400 Services Gateway hardware documentation at www.juniper.net/techpubs/.
You need a Phillips (+) screwdriver, number 2, to install the services gateway.

SRX1400 Services Gateway Getting Started Guide
Install the SRX1400 Services Gateway in a Rack Manually (Without a Mechanical Lift)
Before you install the services gateway manually, you must remove components from the chassis. You must reinstall the components after the services gateway is installed in the rack.
NOTE: Do not expose the empty CFM slots during storage or transportation. Use appropriate covers (blank panel for CFM slot 2 and filler cover for the adjacent CFM slots 1 and 3) to prevent any dust or foreign objects from damaging the electronics.
At least two people are needed to safely lift the chassis into the rack or cabinet. With components removed, the chassis weighs approximately 23.3 lb (10.57 kg).
WARNING: Do not attempt to lift the chassis by the handles on the power supplies or on the CFMs. The handles might break off, causing the chassis to fall and inflict injury.
NOTE: For safety instructions you should read before you install the services gateway in a rack, see the SRX1400 Services Gateway hardware documentation at www.juniper.net/techpubs.
To install the device manually without using a lift: · Remove Components from the Chassis for Manual Lifting of the SRX1400 Services
Gateway on page 19 · Lift the SRX1400 Services Gateway Chassis into the Rack on page 19 · Reinstall Components into the SRX1400 Services Gateway Chassis on page 21

Remove Components from the Chassis for Manual Lifting of the SRX1400 Services Gateway
Remove Components from the Chassis for Manual Lifting of the SRX1400 Services Gateway To make the services gateway light enough to install manually, you must remove the following components from the chassis: · Power supplies · Fan tray
The procedure in this topic is for removing components from the base model of the chassis for initial installation only. To use this procedure, you must have not yet connected power cables to the services gateway. To remove the components from the services gateway: 1. Attach an ESD grounding strap to your bare wrist and connect the strap to one of the
ESD points on the chassis. For more information about ESD, see the SRX1400 Services Gateway hardware documentation at www.juniper.net/techpubs. 2. Release each component by loosening its retaining screws and unlatching its ejector handles, as appropriate. 3. Slide each component out of the chassis evenly so that it does not become stuck or damaged. 4. Label each component as you remove it so you can reinstall it in the correct location. 5. Immediately store each removed component in an electrostatic bag. 6. Do not stack removed components. Set each one on a flat surface.
Lift the SRX1400 Services Gateway Chassis into the Rack Lifting the chassis and mounting it in a rack requires two people (see Figure 6 on page 20). Without the power supply and fan tray, the chassis weighs approximately 23 lb (10.6 kg). 1. Ensure that the rack is in its permanent location and is secured to the building. 2. Position the chassis in front of the rack. 3. With one person on each side, lift the chassis into position in the rack.
WARNING: Do not attempt to lift the chassis by the handles on the power supplies or on the CFMs. The handles might break off and cause the chassis to fall and inflict injury.

SRX1400 Services Gateway Getting Started Guide
Figure 6: Lift the Chassis Into the Rack
4. Align the bottom hole in each mounting bracket with a hole in each rack rail as shown in Figure 7 on page 20.
Figure 7: Attach Mounting Hardware for Two-Post Rack

g033545

g033516

· For front-mounting the chassis in a two-post rack, align the bottom hole in each mounting bracket at the front edge of the chassis.
· For rear-mounting the chassis in a two-post rack, align the bottom hole in each mounting bracket at the rear edge of the chassis.
NOTE: Similarly, you can front-mount or rear-mount the chassis in a four-post rack. However, there is no support shelf provided for the unsupported edge on which the chassis can rest.

Reinstall Components into the SRX1400 Services Gateway Chassis
5. Use the screws to attach the left and right brackets to the rack. 6. Visually inspect the alignment of the chassis. If the chassis is installed properly in the
rack, all the mounting screws on one side of the rack should be aligned with the mounting screws on the opposite side, and the chassis should be level.
Reinstall Components into the SRX1400 Services Gateway Chassis To reinstall the components into the SRX1400 Services Gateway chassis: 1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist, and connect
the strap to one of the ESD points on the chassis. For more information about ESD, see the SRX1400 Services Gateway hardware documentation at www.juniper.net/techpubs. 2. Identify the locations in the chassis where you will reinstall the removed components. Use the label you have marked on each removed component to identify the component and its correct location in the chassis. 3. Slide each component into the chassis evenly so that it does not become stuck or damaged. 4. Tighten the latching levers or captive screws for each component as appropriate.
NOTE: Do not expose the empty CFM slots during storage or transportation. Use appropriate covers (blank panel for CFM slot 2 and filler cover for the adjacent CFM slots 1 and 3) to prevent any dust or foreign objects from damaging the electronics.
Step 5: Connect the External Devices and IOC Cables to the SRX1400 Services Gateway
The following topics describe how to connect the external devices and IOC cables to the services gateway: · Connect the SRX1400 Services Gateway to a Network for Out-of-Band
Management on page 21 · Connect the SRX1400 Services Gateway to a Management Console on page 22 · Connect the Ethernet Network Cables to the SRX1400 Services Gateway on page 23
Connect the SRX1400 Services Gateway to a Network for Out-of-Band Management
To connect the Routing Engine to a network for out-of-band management: 1. Plug one end of an Ethernet cable with RJ-45 connectors (see Figure 8 on page 22)
into the RE ETHERNET port on the front of the SYSIOC.

g033544

SRX1400 Services Gateway Getting Started Guide
Figure 8: Ethernet Cable Connector
2. Plug the other end of the cable into the management device. 3. Proceed with grounding and powering on the device. After you have connected the services gateway, you can use Telnet or SSH through the RE ETHERNET port to connect to the management device for monitoring and configuration. However, you need to assign an IP address to the device's Ethernet interface, either by using the DHCP process or by acquiring an IP address from your ISP to access the services gateway through the management device.
Connect the SRX1400 Services Gateway to a Management Console
To use a system console to configure and manage the Routing Engine, use an RJ-45 cable to connect it to one of the CONSOLE ports on the SYSIOC. To connect a management console or an auxiliary device: 1. Plug the RJ-45 end of the cable (see Figure 9 on page 23) into the CONSOLE port on
the SYSIOC.

Connect the Ethernet Network Cables to the SRX1400 Services Gateway
Figure 9: Console Cable Connector

g033543

2. Plug the female DB-9 end into the device's serial port.
NOTE: For console devices, configure the serial port to the following values: · Baud rate--9600 · Parity--N · Data bits--8 · Stop bits--1 · Flow control--none
3. Proceed with grounding and powering on the device. You can start performing initial software configuration on the SRX1400 Services Gateway after the device is up.
Connect the Ethernet Network Cables to the SRX1400 Services Gateway
To connect the IOC cables to the services gateway: 1. Have ready a length of the type of cable used by the network interface. 2. If you are connecting a fiber interface cable, the connector port might be covered by
a rubber safety cap. If it is, remove the cap.
WARNING: Do not look directly into a fiber-optic transceiver or into the ends of fiber-optic cables. Fiber-optic transceivers and fiber-optic cable connected to a transceiver emit laser light that can damage your eyes.

SRX1400 Services Gateway Getting Started Guide
CAUTION: Do not leave a fiber-optic transceiver uncovered except when you are inserting or remove cable. The safety cap keeps the port clean and prevents accidental exposure to laser light.
3. Insert the cable connector into the cable connector port on the IOC faceplate.
CAUTION: Avoid bending fiber-optic cable beyond its minimum bend radius. An arc smaller than a few inches in diameter can damage the cable and cause problems that are difficult to diagnose.
CAUTION: Do not let fiber-optic cable hang free from the connector. Do not allow fastened loops of cable to dangle, as this can stress the cable at the fastening point.
Step 6: Connect the Ground and Power Cables
This topic describes how to connect, ground, power on, and power off the services gateway. Depending on your configuration, your device uses either AC or DC power supplies. Perform the appropriate procedure for each power supply in your device.
NOTE: An AC power cord is shipped with the device. Ensure that the AC power cord plug is appropriate for your geographical location. The SRX1400 Services Gateway contains one or two power supplies. The secondary power supply is for redundancy. Only the redundant power supply is hot-swappable. For more information, see the SRX1400 Services Gateway hardware documentation at www.juniper.net/techpubs.
This step includes the following sections: · Connect the Grounding Cable to the SRX1400 Services Gateway on page 25 · Connect Power to an AC-Powered SRX1400 Services Gateway on page 26 · Connect Power to a DC-Powered SRX1400 Services Gateway on page 29 · Power On the SRX1400 Services Gateway on page 30 · Power Off the SRX1400 Services Gateway on page 31

Connect the Grounding Cable to the SRX1400 Services Gateway
Connect the Grounding Cable to the SRX1400 Services Gateway
WARNING: To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power.
CAUTION: Before you connect power to the services gateway, a licensed electrician must attach a cable lug to the grounding cable that you use. A cable with an incorrectly attached lug can damage the device (for example, by causing a short circuit).
To connect the services gateway to earth ground: 1. Verify that a licensed electrician has attached the cable lug provided with the services
gateway to the grounding cable. The cable must be 14-AWG (2.1 mm2), minimum 60°C wire. 2. Attach an ESD grounding strap to your bare wrist, and connect the strap to an approved site ESD grounding point. See the instructions for your site. 3. Ensure that all grounding surfaces are clean and brought to a bright finish before you make the grounding connections. 4. Connect the grounding cable to a proper earth ground. 5. Detach the ESD grounding strap from the site ESD grounding point. 6. With the ESD grounding strap attached to your bare wrist, connect the strap to one of the ESD points on the chassis. 7. Place the grounding cable lug over the grounding point--a pair of M5 holes to the left of the power supply slots. See Figure 10 on page 26.

SRX1400 Services Gateway Getting Started Guide
Figure 10: Connect the Grounding Cable to the SRX1400 Services Gateway

g033542

8. Secure the grounding cable lug to the chassis using washers and screws. 9. Dress the grounding cable, and verify that it does not touch or block access to device
components and it does not cause a tripping hazard.
For grounding cable specifications and information about ESD, see the SRX1400 Services Gateway hardware documentation at www.juniper.net/techpubs.
Connect Power to an AC-Powered SRX1400 Services Gateway
You connect AC power to the services gateway by attaching power cords from the AC power sources to the AC appliance inlets located on the power supplies.
WARNING: To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power. See Grounding the SRX1400 Services Gateway for instructions.
CAUTION: Do not mix AC and DC power supplies within the same services gateway. Damage to the services gateway might occur.

Connect Power to an AC-Powered SRX1400 Services Gateway
To connect the AC power cords to the services gateway for each power supply: 1. Locate the power cord or cords with the type of plug appropriate for your geographical
location to connect the device to AC power. For more information about model numbers, see the SRX1400 Services Gateway hardware documentation at www.juniper.net/techpubs.
NOTE: The SRX1400 Services Gateways now ship with a retainer clip for the power cord.
2. If your services gateway is equipped with a wire bail: a. Insert the appliance coupler end of the power cord into the appliance inlet on the power supply. b. Snap the wire bail on the power supply over the power cord to prevent the power cord from accidentally disengaging.
Figure 11: Connect the Chassis to AC Power (Using a Wire Bail)
3. If your services gateway is equipped with a retainer clip for the power cord: a. Squeeze the two sides of the power cord retainer clip and insert the L-shaped ends of the retainer clip into the holes in the bracket on each side of the AC appliance inlet. b. Insert the appliance coupler end of the power cord into the appliance inlet on the power supply. c. Push the power cord into the slot in the adjustment nut of the power cord retainer clip. Turn the nut until it is snug against the base of the coupler.

g033522

SRX1400 Services Gateway Getting Started Guide
Figure 12: Connect the Chassis to AC Power (Using a Retainer Clip)
1. Adjustment nut 2. Retainer clip 4. Insert the power cord plug into an external AC power source receptacle.
NOTE: Each power supply must be connected to a dedicated AC power feed and a dedicated external circuit breaker. We recommend that you use a 15 A (250 VAC) minimum circuit breaker, or as permitted by local code. 5. Dress the power cord appropriately. Verify that the power cord does not block the air exhaust or access to device components and does not cause a tripping hazard. 6. Repeat Steps 1 through 5 for the second power supply. If the PWR LED indicates that the power supply is not functioning normally, repeat the installation and cabling procedures. NOTE: If power is lost to the services gateway, the Power-On/Power-Off state is retained. For example, if the services gateway loses power while the device is on, when power returns, the device will still be in the On state.

Connect Power to a DC-Powered SRX1400 Services Gateway

Connect Power to a DC-Powered SRX1400 Services Gateway
You connect DC power to the services gateway by attaching power cables from the external DC power sources to the terminal studs on the power supply faceplates.
WARNING: To meet safety and electromagnetic interference (EMI) requirements and to ensure proper operation, you must properly ground the services gateway chassis before connecting power. See Grounding the SRX1400 Services Gateway for instructions.
WARNING: Before performing the following procedure, ensure that power is removed from the DC circuit. To ensure that all power is off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the off position, and tape the switch handle of the circuit breaker in the off position.
CAUTION: Do not mix AC and DC power supplies within the same services gateway. Damage to the services gateway might occur.
CAUTION: Before you connect power to the services gateway, a licensed electrician must attach appropriate cable lugs to the grounding and power cables that you use. A cable with an incorrectly attached lug can damage the device (for example, by causing a short circuit).
To connect the DC source power cables to the services gateway for each power supply:
1. Switch off the dedicated facility circuit breakers. Ensure that the voltage across the DC power source cable leads is 0 V and that there is no chance that the cable leads might become active during installation.
2. Remove the clear plastic cover that protects the terminal studs on the faceplate. 3. Verify that the DC power cables are correctly labeled before making connections to
the power supply. In a typical power distribution scheme where the return is connected to chassis ground at the battery plant, you can use a multimeter to verify that the ohm output of the -48V and RTN DC cables to chassis ground. The cable with very large resistance (indicating an open circuit) to chassis ground will be -48V, and the cable with very low resistance (indicating a closed circuit) to chassis ground will be RTN.
CAUTION: You must ensure that power connections maintain the proper polarity. The power source cables might be labeled (+) and () to indicate

SRX1400 Services Gateway Getting Started Guide
their polarity. There is no standard color coding for DC power cables. The color coding used by the external DC power source at your site determines the color coding for the leads on the power cables that attach to the terminal studs on each power supply.
4. Remove the screws and square washers from the terminals, using a Phillips (+) screwdriver, number 2.
5. Secure each power cable lug to the terminals with the square washers and the screws. Apply between 23 in.-lb (2.6 Nm) and 25 in.-lb (2.8 Nm) of torque to each screw. · Secure each positive (+) DC source power cable lug to a RTN (return) terminal. · Secure each negative () DC source power cable lug to a -48V (input) terminal.
6. Replace the clear plastic cover over the terminal studs on the faceplate. 7. Verify that the power cables are connected correctly, that they are not touching or
blocking access to services gateway components, and they do not cause a tripping hazard. 8. Repeat Steps 1 through 7 for the second power supply, if you are installing one.
NOTE: If power is lost to the services gateway, the Power-On/Power-Off state is retained. For example, if the services gateway loses power while the device is on, when power returns, the device will still be in the On state.
Power On the SRX1400 Services Gateway
To power on the services gateway: 1. Ensure that you have connected the AC power cord or DC power cables to the device. 2. Insert the plug into an AC power source receptacle (for AC-powered devices).
Or Attach the power cable to the DC power source (for DC-powered devices). The device starts automatically as the power supply completes its startup sequence. The Power LED blinks during startup and remains on steadily when the device is operating normally.

Power Off the SRX1400 Services Gateway
NOTE: · If the device does not power on after connecting to the power supply, press
the POWER button on the front of the SYSIOC for 3 to 5 seconds to power on the device. · The Routing Engine, the SYSIOC, and at least one power supply must be installed on the SRX1400 Services Gateway for the device to power on. · If power is lost to the services gateway, the Power-On/Power-Off state is retained. For example, if the services gateway loses power while the device is on, when power returns, the device will still be in the On state.
Power Off the SRX1400 Services Gateway
You can power off the services gateway in one of the following ways: · Graceful shutdown--Press and the POWER button on the front of the SYSIOC for 3 to
5 seconds to initiate graceful shutdown. The device begins gracefully shutting down the operating system and then powers itself off. · Forced shutdown--Press the POWER button and hold it for 15 seconds to power down the device immediately. You need to press the POWER button again to power on the device.
CAUTION: Use the graceful shutdown method to power off or reboot the services gateway. Use the forced shutdown method as a last resort to recover the services gateway if the services gateway operating system is not responding to the graceful shutdown method. By default, even if you press the POWER button and hold it for 15 seconds (that is, more than 5 seconds), the device will still do a graceful shutdown if it is responsive and operating normally. The device will resort to forced shutdown only if the operating system does not initiate the graceful shutdown process first.
To remove power completely from the device, unplug the AC power cord (for AC-powered devices) or switch off the DC power source (for DC-powered devices). After powering off the device, wait for at least 10 seconds before powering on the device again. After powering on the device, wait for at least 10 seconds before powering it off.
CAUTION: Forced shutdown can result in data loss and corruption of the file system.

SRX1400 Services Gateway Getting Started Guide

Step 7: Perform the Initial Software Configuration on the SRX1400 Services Gateway
The following topics describe how to perform the initial software configuration on the services gateway:
· SRX1400 Services Gateway Software Configuration Overview on page 32 · Perform Initial Software Configuration on the SRX1400 Services Gateway (CLI
Procedure) on page 33
SRX1400 Services Gateway Software Configuration Overview
The services gateway is shipped with Junos OS preinstalled and ready to be configured when the services gateway is powered on. You can configure the services gateway using the CLI, the J-Web interface, SSH, or Telnet. However, you can perform initial configuration using the CLI only.
The SRX1400 Services Gateway includes Junos OS images in:
· The CompactFlash card in the Routing Engine · The hard disk in the Routing Engine
NOTE: You can also use a Junos OS image stored on a USB flash drive that you insert into the Routing Engine faceplate.
When the services gateway boots, the following sequence of events occurs:
1. The device attempts to start the image on the USB flash drive (if available). 2. The device attempts to start the image from the CompactFlash card if the USB flash
drive is not inserted into the Routing Engine or if the first attempt fails. 3. The device attempts to start the image from the hard disk if the first two methods
fail.
You configure the services gateway by using CLI commands, either on a console device attached to the CONSOLE port on the SYSIOC or over a Telnet connection to a network connected to the RE ETHERNET port on the SYSIOC.
Gather the following information before configuring the services gateway:
· Name the services gateway will use on the network · Domain name the services gateway will use · IP address and prefix length information for the Ethernet interface · IP address of a default router · IP address of a DNS server · Password for the root user

Perform Initial Software Configuration on the SRX1400 Services Gateway (CLI Procedure)

Related · Perform Initial Software Configuration on the SRX1400 Services Gateway (CLI Documentation Procedure) on page 33
· Connect the SRX1400 Services Gateway to a Network for Out-of-Band Management on page 21
· Connect the SRX1400 Services Gateway to a Management Console on page 22
Perform Initial Software Configuration on the SRX1400 Services Gateway (CLI Procedure)
This sample procedure explains how you can create an initial configuration using CLI commands to connect the services gateway to the network. For complete information about enabling the services gateway to forward traffic, including examples, see the appropriate Junos OS configuration guides at www.juniper.net/techpubs/.
To configure Junos OS:
1. Verify that the device is powered on.
2. Log in as the root user. There is no password.
3. Start the CLI.
root#cli root# 4. Enter configuration mode.
configure [edit] root@# 5. Set the root authentication password by entering a cleartext password, an encrypted password, or an SSH public key string (DSA or RSA).
[edit] root@# set system root-authentication plain-text-password New password: password Retype new password: password 6. Configure an administrator account on the device. When you are prompted, enter the password for the administrator account.
[edit] root@# set system login user admin class super-user authentication plain-text-password New password: password Retype new password: password 7. Commit the configuration to activate it on the services gateway.
[edit] root@# commit 8. Log in as the administrative user you configured in Step 6.
9. Configure the name of the services gateway. If the name includes spaces, enclose the name in quotation marks (" ").
configure [edit] admin@# set system host-name host-name 10. Configure the IP address and prefix length for the services gateway Ethernet interface.
[edit]

SRX1400 Services Gateway Getting Started Guide

admin@# set interfaces fxp0 unit 0 family inet address address/prefix-length 11. Configure the traffic interface.
[edit] admin@# set interfaces ge-0/0/0 unit 0 family inet address address/prefix-length admin@# set interfaces ge-0/0/1 unit 0 family inet address address/prefix-length
NOTE: The ge-0/0/0 interface is for the LAN, and the ge-0/0/1 interface is for the ISP.
12. Configure the default route.
[edit] admin@# set routing-options static route 0.0.0.0/0 next-hop gateway 13. Configure basic security zones and bind them to traffic interfaces.
[edit] admin@# set security zones security-zone trust interfaces ge-0/0/0 admin@# set security zones security-zone untrust interfaces ge-0/0/1 14. Configure basic security policies.
[edit] admin@# set security policies from-zone trust to-zone untrust policy policy-name match source-address any destination-address any application any admin@# set security policies from-zone trust to-zone untrust policy policy-name then permit admin@# set security policies from-zone untrust to-zone trust policy policy-name match source-address any destination-address any application any admin@# set security policies from-zone untrust to-zone trust policy policy-name then permit
NOTE: The actual configuration of the policies depends on your requirements.
15. Check the configuration for validity.
[edit] admin@# commit check configuration check succeeds 16. Commit the configuration to activate it on the services gateway.
[edit] admin@# commit commit complete 17. Optionally, display the configuration to verify that it is correct.
NOTE: This is a sample output. The actual output might vary depending on your configuration requirements.
admin@# show ## Last changed: 2010-08-18 05:50:46 UTC version "10.4I0 [sharibkh]"; system {
host-name doc; root-authentication {
encrypted-password "$ABC123"; ## SECRET-DATA

Perform Initial Software Configuration on the SRX1400 Services Gateway (CLI Procedure)

} login {
user admin { uid 2000; class super-user; authentication { encrypted-password "$ABC123"; ## SECRET-DATA }
} user@host {
uid 928; class super-user; authentication {
encrypted-password "$ABC123"; ## SECRET-DATA } } } services { ssh; telnet; web-management { http; } } } interfaces { ge-0/0/0 { unit 0 { family inet {
address 192.1.1.1/24; } } } ge-0/0/1 { unit 0 { family inet {
address 5.1.1.1/24; } } } fxp0 { unit 0 { family inet {
address 10.204.210.23/23; address 192.168.10.2/24; } } } } routing-options { static { route 0.0.0.0/0 next-hop [ 10.204.211.254 5.1.1.2 ]; } } security { zones { security-zone trust { interfaces { ge-0/0/0.0; } }

SRX1400 Services Gateway Getting Started Guide
security-zone untrust { interfaces { ge-0/0/1.0; }
} } policies {
from-zone trust to-zone untrust { policy bob { match { source-address any; destination-address any; application any; } then { permit; } }
} } policies {
from-zone untrust to-zone trust { policy bob { match { source-address any; destination-address any; application any; } then { permit; } }
} } }
[edit] user@host#
[edit]
18. Commit the configuration to activate it on the services gateway.
[edit] admin@# commit
19. Optionally, configure additional properties by adding the necessary configuration statements. Then commit the changes to activate them on the services gateway.
[edit] admin@# commit
20. When you have finished configuring the services gateway, exit configuration mode.
[edit] admin@# exit admin@>

Step 8: Monitor the SRX1400 Services Gateway

NOTE: To access the device using J-Web for the first time, enter the configuration mode in the CLI, and set the management option using the command set system services web-management http.
If you are using an interface other than fxp0, then you must also use the command set security zones security-zone trust interface interface-name host-inbound-traffic system-services http/https to set up J-Web.