Juniper NETWORKS letšoaoSRX320 Qalo e potlakileng
E hatisitsoe
2023-10-29
RELEBOHILE

Mohato oa 1: Qala

Tataisong ena, re fana ka tsela e bonolo, e nang le mehato e meraro, ho u thusa ho sebetsa ka potlako ka SRX320 ea hau e ncha. Re nolofalitse le ho khutsufatsa mehato ea ho kenya le ho hlophisa, 'me re kenyelelitse le livideo tsa mokhoa oa ho etsa. U tla ithuta ho kenya SRX320 ka rack, u e fe matla, 'me u e sebelise ho netweke ea hau u sebelisa CLI.
HLOKOMELA: Re nahana hore u tla batla ho sheba rona Tlhophiso e Tataisitsoeng: SRX300 Line Firewalls. Tataiso ea rona ea Tataiso e qala moo Letsatsi lena la Pele+ le fellang teng, e fana ka litaelo tsa mohato ka mohato mabapi le mokhoa oa ho boloka le ho netefatsa sebaka sa lekala la hau habonolo.
Na u thahasella ho fumana boiphihlelo ka lihlooho le ts'ebetso e fanoeng tataisong ee? Etela Juniper Networks Virtual Labs 'me u boloke sandbox ea hau ea mahala kajeno! U tla fumana lebokose la lehlabathe la Junos Day One Experience ka har'a sehlopha sa lipontšo tse ikemetseng.
Kopana le SRX320
Juniper Networks® SRX320 Firewall e fana ka tšireletso ea moloko o latelang, ho tsamaisa, ho fetola, le khokahanyo ea WAN mochine o monyenyane oa desktop. SRX320 e na le likou tse robeli tsa 1GbE, ho kenyeletsoa likou tse tšeletseng tsa marang-rang tsa RJ-45 le likou tse peli tse nyane tsa li-transceiver (SFP). Likou tsa SFP li na le bokhoni ba MACsec.

Juniper NETWORKS SRX320 Services Gateway - likou tsa transceiverKenya SRX320 ka har'a Rack

O ka kenya SRX320 tafoleng kapa deskeng, leboteng, kapa ka rack. Re u bontša mokhoa oa ho e kenya ka rack.
Ho na le eng ka Lebokoseng?

  • SRX320 Firewall
  • Thapo ea motlakase e loketseng sebaka seo u leng ho sona
  • Mohala oa USB

Ke Hloka Eng Hape?
Cable ea DB-9 ho ea ho RJ-45 kapa adaptara ea DB-9 ho ea ho RJ-45 e nang le thapo ea koporo ea CAT5E—Ha re sa kenyelletsa thapo ea DB-9 ho ea ho RJ-45 kapa adaptara ea DB-9 ho ea ho RJ-45 e nang le CAT5E. thapo ea koporo joalo ka karolo ea sephutheloana sa sesebelisoa. Haeba o hloka thapo ea console, o ka e odara ka thoko ka karolo ea nomoro ea JNP-CBL-RJ45DB9 (adapter ea DB-9 ho ea ho RJ-45 e nang le thapo ea koporo ea CAT5E).
Ho kenya SRX320 ka rack, o tla hloka ho odara rack mount kit e loketseng ts'ebetso ea hau.
Thepa e hlokahalang ea rack mount kit e itšetlehile ka hore na u na le mohlala oa PoE kapa o seng oa PoE SRX320, le hore na u se u ntse u e-na le terei ea motlakase ea motlakase. Sheba tafole e latelang ho bona hore na u hloka rack mount kit efe.

Mohlala Rack Mount Kit e nang le Tray ea Adapter ea Power Supply Rack Mount Kit Ntle le Power Supply Adapter Tray
SRX320 (mohlala oo e seng oa PoE) SRX320-RMK0 E kenyelletsa:
• Li-screws tse holimo tse sephara tsa M3x5mm Phillips tse leshome le metso e 'meli
• Borakete e le 'ngoe ea ho kenya
• Terei e le 'ngoe ea li-adapter tsa motlakase le li-brackets tse peli tse emisang adaptara
SRX320-RMK1 E kenyelletsa:
• Likurufu tse robeli tse bataletseng tsa M3x5mm Phillips
• Li-brackets tse peli
SRX320 (Mohlala oa PoE) SRX320-P-RMK0 E kenyelletsa:
• Likurufu tsa Phillips tsa hlooho tse bataletseng tse leshome le metso e meraro tsa M3x5mm
• Borakete e le 'ngoe ea ho kenya
• Terei e le 'ngoe ea adaptara ea motlakase le li-brackets tse tharo tse emisang adaptara
SRX320-P-RMK1 E kenyelletsa:
• Likurufu tse robeli tse bataletseng tsa M3x5mm Phillips
• Li-brackets tse peli

Hape o tla hloka ho fana ka:

  • Motho ea ka u thusang ho kenya
  • Li-screws tsa rack tse loketseng rack ea hau
  • Nomoro ea 2 Phillips (+) screwdriver

Raka E

  1. Review Kakaretso ea Tataiso ea Tšireletso le Litemoso.
  2. Koahela 'me u fase ntlha e' ngoe ea mohala o theohileng oa electrostatic discharge (ESD) ho potoloha letsoho la hao le se nang letho, 'me u hokele ntlha e 'ngoe sebakeng sa ESD.
  3. Hokela borakete e ntseng e hola le terei ea adaptara ea phepelo ea motlakase mahlakoreng a SRX320 u sebelisa likurufu tse tlileng le rack mount kit le screwdriver.Juniper NETWORKS SRX320 Services Gateway - Rack It
  4. Beha adaptara ea phepelo ea motlakase ka tereing.Juniper NETWORKS SRX320 Gateway ea Litšebeletso - Rack It 1
  5. Phahamisa SRX320 'me u e behe ka har'a raka. Kenya lesoba le ka tlase mabaketeng a ntseng a hola ka lesoba seporong se seng le se seng sa rack, ho etsa bonnete ba hore SRX320 e maemong.
  6. Ha u ntse u tšoere SRX320 sebakeng sa eona, kenya motho oa bobeli 'me u tiise li-screws tsa rack ho tiisa terei ea adaptara le masakaneng a ho kenya liporong tse ntseng li hola. Etsa bonnete ba hore o tiisa li-screws ka masoba a mabeli a ka tlase pele, ebe u tiisa li-screw ho masoba a mabeli a ka holimo.Juniper NETWORKS SRX320 Gateway ea Litšebeletso - Rack It 2
  7. Etsa bonnete ba hore li-brackets tse ntseng li kenngoa ka lehlakoreng le leng la rack li lekana.

Matla On
Kaha joale o kentse SRX320 rakeng, u se u loketse ho e hokahanya le matla.

  1. Koahela 'me u fase ntlha e' ngoe ea mohala o theohileng oa electrostatic discharge (ESD) ho potoloha letsoho la hao le se nang letho, 'me u hokele ntlha e 'ngoe sebakeng sa ESD.
    HLOKOMELA: Haeba SRX320 e na le terei ea adaptara ea phepelo, u ka etsa mohato oa 2 le oa 3 ka adaptara ea phepelo ea motlakase e lutseng ka tereing.
  2. Hokela pheletso ea sehokelo sa DC ea thapo ea matla ka har'a sehokelo sa matla se ka morao ho SRX320.Juniper NETWORKS SRX320 Gateway ea Litšebeletso - Rack It 3
  3. Hokela pheletso ea adaptara ea AC ea thapo ea motlakase ho adaptara ea phepelo ea motlakase.
  4. Haeba mohloli oa motlakase oa AC o na le switch ea motlakase, e tima.
  5. Hokela thapo ea motlakase mohloling oa motlakase oa AC.
  6. Haeba mohloli oa motlakase oa AC o na le switch ea motlakase, e bule.
    SRX320 e matlafala hang ha o e hokela matla. Ha STAT LED e phanele e ka pele e bonesitsoe botala bo tiileng, SRX320 e se e loketse ho sebelisoa.

Mohato oa 2: Phahamisa le ho Matha

Kaha joale SRX320 e se e buletsoe, ha re etseng tlhophiso ea pele ho e qala le ho sebetsa marang-rang.
HLOKOMELA: Etsa bonnete ba ho hlahloba rona Tlhophiso e Tataisitsoeng: SRX300 Line Firewalls. Tlhophiso ea rona ea Tataiso e qala moo Letsatsi lena la Pele+ le tlohang teng, e fana ka litaelo tsa mohato ka mohato mabapi le mokhoa oa ho boloka le ho netefatsa sebaka sa lekala la hau habonolo.

Likhetho tsa ho fana ka SRX320
Ho bonolo ho fana le ho laola SRX320 le lisebelisoa tse ling marang-rang a hau. Khetha sesebelisoa sa tlhophiso se u loketseng:

  • Junos CLI e laela. Tataisong ena re u bonts'a mokhoa oa ho hlophisa SRX320 ka litaelo tsa CLI tse phahamisang plug le ho bapala li-fameme tsa feme.
  • J-Web, Juniper Networks GUI e kentsoe pele ho SRX320. Bakeng sa tlhahisoleseling mabapi le ho etsa tlhophiso ea pele u sebelisa J-Web setup wizate bona Lokisa lisebelisoa tsa SRX U sebelisa J-Web Seta Wizard ka J-Web Tataiso ea mosebelisi bakeng sa lisebelisoa tsa SRX Series.
  • Juniper Networks lits'ebetso tse thehiloeng ho Cloud. Lisebelisoa tsena li na le plug le play ho u thusa ho qala le ho sebetsa marang-rang:
  • Juniper Sky™ Enterprise, Software ea sechaba e thehiloeng marung e tsamaisoang ke Juniper Networks e le Ts'ebeletso (SaaS). U tla hloka ho ba le tšebeletso ea ngoliso ea Juniper Sky Enterprise pele u ka e sebelisa ho hlophisa SRX320. Bakeng sa tlhahisoleseling e eketsehileng, etela Juniper Sky Enterprise Ho qala Tataiso.
  • Contrail Service Orchestration (CSO). Haeba u sebelisa Junos OS Release 19.2 kapa pejana, u ka sebelisa Juniper Networks Network Service Controller ho lokisa SRX320 ka ZTP. Network Service Controller ke karolo ea CSO. Bona Lokisa sesebelisoa u sebelisa ZTP le Juniper Networks Network Service Controller.
    Ho sebelisa CSO, o tla hloka khoutu ea netefatso. Bona the Contrail Service Orchestration (CSO) Tataiso ea ho Tsamaisa.

Tlhophiso ea Pele e Sebelisa CLI

U ka sebelisa koung ea console ho SRX ho etsa tlhophiso ea pele. Karolo ena e nka hore o qala ho tsoa ho tlhophiso ea kamehla ea feme. Bona Tlhaloso: SRX320 Firewall Hardware Guide bakeng sa lintlha tse mabapi le tlhophiso ea kamehla ea feme ea SRX320.
Kamora hore o lokise SRX320, o ka kena boema-kepeng ba LAN ba lehae, kapa o le hole ka sebopeho sa WAN, ho laola le ho lokisa SRX o sebelisa CLI kapa J-Web.
Re khothaletsa hore o sebelise sebopeho sa ge-0/0/0 bakeng sa khokahanyo ea WAN ho SRX320. Ka ho tloaeleha, sebopeho sena se setiloe hore se fumane tlhophiso ea phihlello ea Marang-rang ho tsoa ho mofani oa litšebeletso.
HLOKOMELA: Examples e nka hore u sebelisa DHCP ho lokisa sebopeho sa WAN. Haeba mofani oa WAN a sa tšehetse DHCP ypu o tla hloka ho iketsetsa sebopeho sa WAN le litsela tse amanang le eona. Bona Phetoho ea pele ea Junos.
E-ba le tlhahisoleseding ena pele u qala tlhophiso ea pele:

  • Motso oa password
  • Lebitso la moamoheli

Hokela ho Serial Console Port

  1. Hokela pheletsong e le 'ngoe ea thapo ea Ethernet ho RJ-45 ho isa ho DB-9 serial port adaptara bakeng sa SRX320 ea hau.
    HLOKOMELA: Ha re sa kenyelletsa thapo ea DB-9 ho ea ho RJ-45 kapa adaptara ea DB-9 ho ea ho RJ-45 e nang le thapo ea koporo ea CAT5E e le karolo ea sephutheloana sa sesebelisoa. Haeba o hloka thapo ea console, o ka e odara ka thoko ka karolo ea nomoro ea JNP-CBL-RJ45-DB9 (adapter ea DB-9 ho ea ho RJ-45 e nang le thapo ea koporo ea CAT5E).
  2. Hokela RJ-45 ho DB-9 serial port adaptara boema-kepeng ba serial sesebelisoa sa taolo.
  3. Hokela pheletsong e 'ngoe ea thapo ea Ethernet ho koung ea serial console ho SRX320.Juniper NETWORKS SRX320 Services Gateway - Ho matha
  4. Qala ts'ebeliso ea hau ea ho etsisa terminal (joalo ka Microsoft Windows HyperTerminal) ebe u khetha boema-kepe bo nepahetseng ba COM ho bo sebelisa (bakeng sa ex.ample, COM1).
  5. Netefatsa hore li-setting tsa serial port li behiloe ho ea kamehla:
    • Sekhahla sa Baud-9600
    • Tekano—N
    • Likotoana tsa data—8
    • Likotoana tsa ho emisa—1
    • Taolo ea phallo—ha ho letho

HLOKOMELA: Hape o ka hokela ho SRX320 o sebelisa boema-kepe ba mini-USB console. Bona the Tataiso ea lisebelisoa tsa SRX320.
Etsa Tlhophiso ea Pele

  1. Kena joalo ka mosebelisi oa metso 'me u qale CLI. Ha o hloke phasewete haeba o sebelisa feme ea kamehla.
    login: motso
    motso@%cli
    motso>
    ELA HLOKO: U ka khona view litlhophiso tsa kamehla tsa feme ka ts'ebetso ea ponts'o
    taelo ea mokhoa.
  2. Kenya mokhoa oa tlhophiso.
    motso> lokisa
    [edit] motso#
  3. Kaha u ntse u etsa tlhophiso ea pele ka letsoho, u tla hloka ho tlosa ZTP ho tlhophiso. Sena se emisa melaetsa ea log ea nako le nako e tlalehang ka boemo ba ZTP.
    Beha phasewete ea netefatso ea motso 'me u etse phetoho ho koala ZTP.
    [edit] motso# hlakola ntlafatso ea setšoantšo sa chassis
    motso # hlakola sistimi ea mohala-lehae
    root# set the root-athentication plain-text-password
    Password e ncha: password
    Ngola hape phasewete e ncha: password
    Fana ka taelo ea boitlamo ho kenya tšebetsong tlhophiso ea mokhethoa e thibelang ZTP:
    [edit] motso# boitlamo
  4. Numella ho kena ha metso holim'a SSH, 'me u lumelle ho fihlella SSH holim'a sebopeho sa WAN (ge-0/0/0).
    [edit] motso# seta lits'ebeletso tsa sistimi ea ssh ho kena motso ho lumella
    motso# beha libaka tsa ts'ireletso-sebaka sa ts'ireletso ea ho se tšepahale lihokelo tsa ge-0/0/0.0 sephethephethe se kenang
    lits'ebeletso tsa sistimi ssh
  5. Lokisa lebitso la moamoheli.
    [edit] motso# seta lebitso la moamoheli-lebitso la host_name
  6. Ho felile ke lehlohonolo! Tokiso ea pele e felile. Nehelana ka tlhophiso ho kenya tšebetsong liphetoho ho SRX.
    [edit] motso# boitlamo

Kea u babatsa! SRX ea hau e ea holimo ebile e ea sebetsa
Hajoale SRX320 ea hau e inthaneteng 'me e fana ka phihlello e sireletsehileng ea Marang-rang ho lisebelisoa tse hoketsoeng likoung tsa LAN.
O ka tsamaisa sesebelisoa sebakeng sa heno le hole, o sebelisa Junos CLI, J-Web, kapa tšebeletso ea phano e thehiloeng marung. Mona ke hore na marang-rang a hau a shebahala joang:

Juniper NETWORKS SRX320 Khoro ea Litšebeletso - Ho matha 1

Lintho tse 'maloa tseo u lokelang ho li hopola ka marang-rang a hau a macha a lekala la SRX320:

  • U fihlella SRX CLI kapa J-Web sehokelo sa mosebelisi sebakeng sa heno se sebelisang aterese ea 192.168.1.1. Ho fihlella SRX u le hole, bolela aterese ea IP e fanoeng ke mofani oa WAN. Fana feela ka li-interfaces tsa show ge-0/0/0 terse CLI taelo ho netefatsa aterese e sebelisoang ke sebopeho sa WAN.
  • Lisebelisoa tse hokelletsoeng likoung tsa LAN li lokiselitsoe ho sebelisa DHCP. Ba fumana tlhophiso ea marang-rang ea bona ho tsoa ho SRX. Lisebelisoa tsena li fumana aterese ea IP ho tsoa letamong la liaterese la 192.168.1.0/24 'me li sebelisa SRX joalo ka tsela ea tsona ea kamehla.
  • Likou tsohle tsa LAN li ka har'a subnet e le 'ngoe e nang le khokahanyo ea Layer 2. Sephethephethe sohle se lumelletsoe lipakeng tsa li-interfaces tsa trust zone.
  • Sephethephethe sohle se tsoang sebakeng sa trust se lumelletsoe sebakeng se sa tšepahaleng. Sephethephethe sa likarabo se ts'oanang se lumelletsoe ho khutla ho tloha ho se tšepahaleng ho ea sebakeng sa trust. Sephethephethe se tsoang sebakeng sa batho ba sa tšepahaleng se koetsoe sebakeng sa batho ba tšepang.
  • SRX e etsa mohloli NAT (S-NAT) e sebelisa IP ea WAN interface bakeng sa sephethephethe se rometsoeng ho WAN e tsoang sebakeng sa trust.
  • Sephethephethe se amanang le lits'ebeletso tse ikhethileng tsa sistimi (HTTPS, DHCP, TFTP, le SSH) li lumelletsoe ho tloha sebakeng sa batho ba sa tšepahaleng ho ea ho moamoheli oa lehae. Litšebeletso tsohle tsa sebaka sa heno le liprothokholo li lumelloa bakeng sa sephethephethe se tsoang sebakeng sa trust.

Mohato oa 3: Tsoela Pele

Kea u babatsa! SRX320 ea hau e hlophisitsoe 'me e loketse ho tsamaea. Mona ke lintho tse ling tseo u ka li etsang nakong e tlang.
Ho Latelang?
HLOKOMELA: Ka potlako lokisa le ho netefatsa ofisi ea lekala e sireletsehileng ka mehato e seng mekae e bonolo le rona Tlhophiso e Tataisitsoeng: SRX300 Line Firewalls. Tataiso ea rona ea Tataiso e qala moo tataiso ena ea Letsatsi la Pele+ e fellang teng 'me e etselitsoe ho fumana sebaka sa lekala la hau inthaneteng le ho sireletseha.

Haeba u batla Joale
Lokisa li-interfaces Bona the Li-interfaces Guide bakeng sa Tšireletso
Lokisa marang-rang ka potlako, libaka tsa ts'ireletso, maano a Firewall, le maano a NAT Bona the Tshireletso J-Web Tataiso ea ho Qala
Lokisa liprothokholo tsa tsamaiso ea marang-rang le theknoloji Bona the Tsamaiso ea Marang-rang le Tataiso ea Tlhokomelo
Theha SRX320 ea hau ka mehato e tsoetseng pele ea ts'ireletso ho sireletsa le ho sireletsa marang-rang a hau Etela Letsatsi la Pele: Letoto la SRX le Matha le Litšebeletso tse Tsoetseng Pele tsa Ts'ireletso
Laola lintlafatso tsa software ho SRX320 ea hau Bona Ho kenya Software ho SRX Series Devices
Fumana phihlelo ea matsoho ka mokhoa o boletsoeng tataisong ena Etela Juniper Networks Virtual Labs 'me u boloke sandbox ea hau ea mahala. U tla fumana lebokose la lehlabathe la Junos Day One Experience ka har'a sehlopha se ikemetseng.

Lintlha tse akaretsang

Haeba u batla Joale
Khoasolla, kenya tšebetsong, 'me u tsamaise laesense ea hau ea software ho notlolla likarolo tse ling bakeng sa SRX Firewall ea hau Bona Kenya tšebetsong License tsa Junos OS ho Tataiso ea laesense ea junipere
Sheba litokomane tsohle tse fumanehang bakeng sa SRX320 Etela Setšoantšo sa SRX320 leqepheng la Juniper TechLibrary
Lokisa SRX320 ka Junos OS CLI Qala ka ho Letsatsi la Pele+ bakeng sa Junos OS tataisa
Lokisa SRX320 u sebelisa J-Web Bona J-Web bakeng sa SRX Series Documentation
Lula u le morao-rao mabapi le likarolo tse ncha le tse fetotsoeng le litaba tse tsebahalang le tse rarollotsoeng Bona Lintlha tsa Phallo ea Junos OS
Sebelisa likarolo tse tsoetseng pele tsa tlhophiso tse fanoang ke Juniper Contrail Service Orchestration (CSO) le Juniper Sky Enterprise. U tla hloka ak'haonte le khoutu ea ho kenya tšebetsong. Litataiso tsena li tla u thusa ho qala: Tataiso ea Tšebeliso ea Contrail Service Orchestration (CSO). le ea Juniper Sky Enterprise Ho qala Tataiso.

Ithute ka Lifitio
Laeborari ea rona ea livideo e ntse e hola! Re thehile livideo tse ngata, tse ngata tse bontšang mokhoa oa ho etsa ntho e 'ngoe le e' ngoe ho tloha ho kenya hardware ea hau ho lokisa likarolo tse tsoetseng pele tsa marang-rang tsa Junos OS. Mona ke lisebelisoa tse ling tse ntle tsa video le koetliso tse tla u thusa ho holisa tsebo ea hau ea Junos OS.

Haeba u batla Joale
View a Web-e thehiloeng ho video ea koetliso e fanang ka ho fetaview ea SRX320 mme e hlalosa mokhoa oa ho e kenya le ho e hlophisa SRX300 le SRX320 Firewalls Overview le Phatlalatso (WBT)
Fumana malebela le litaelo tse khutšoane le tse khuts'oane tse fanang ka likarabo tse potlakileng, tse hlakileng le temohisiso mabapi le likarolo tse ikhethileng le mesebetsi ea mahlale a Juniper. Bona Ho ithuta le junipere ho Juniper Networks leqepheng la sehlooho la YouTube
View lethathamo la lithupelo tse ngata tsa mahala tsa tekheniki tseo re fanang ka tsona ho Juniper Etela ho Rea qala leqepheng la Juniper Learning Portal

Juniper Networks, logo ea Juniper Networks, Juniper, le Junos ke matšoao a ngolisitsoeng a Juniper Networks, Inc. United States le linaheng tse ling. Matshwao a mang kaofela a kgwebo, matshwao a tshebeletso, matshwao a ngodisitsweng, kapa matshwao a tshebeletso a ngodisitsweng ke thepa ya beng ba ona ka ho fapana. Juniper Networks ha e nke boikarabello bakeng sa ho se nepahale hofe kapa hofe ho tokomane ena. Juniper Networks e na le tokelo ea ho fetola, ho fetola, ho fetisa, kapa ho ntlafatsa sengoliloeng sena ntle le tsebiso. Copyright © 2023 Juniper Networks, Inc. Litokelo tsohle li sirelelitsoe.

Juniper NETWORKS letšoao

Litokomane / Lisebelisoa

Juniper NETWORKS SRX320 Services Gateway [pdf] Bukana ea Mosebelisi
SRX320, SRX320 Khoro ea Litšebeletso, Khoro ea Litšebeletso, Gateway
Juniper NETWORKS SRX320 Services Gateway [pdf] Bukana ea Mosebelisi
SRX320 Services Gateway, SRX320, Gateway ea Litšebeletso, Gateway

Litšupiso

Tlohela maikutlo

Aterese ea hau ea lengolo-tsoibila e ke ke ea phatlalatsoa. Libaka tse hlokahalang li tšoailoe *