Copyright © 2009, Juniper Networks, Inc. 3
APPLICATION NOTE - Quickstart Guide for Branch SRX Series Services Gateways
root> congure
Entering conguration mode
[edit]
root#
Next, the SRX Series device will be configured to allow secure management access and NAT will be applied to all
outbound traffic.
1. Create an administrative user to manage the SRX Series device.
set system login user johndoe class super-user
set system login user johndoe authentication plain-text-password (will prompt for password)
2. Enable SSH services from the untrust zone for remote management.
set system services ssh
set security zones security-zone untrust host-inbound-traic system-services ssh
3. Set the system hostname.
set system host-name mysrx
4. Set the DNS servers.
set system name-server 4.2.2.2
5. Assign interface fe-0/0/7 to the untrust zone (zone names are case sensitive).
set security zones security-zone untrust interfaces fe-0/0/7
6. Set fe-0/0/7 IP address and default route configuration.
a) To assign the IP address and gateway statically:
set interfaces fe-0/0/7 unit 0 family inet address 1.1.1.1/30
set routing-options static route 0.0.0.0/0 next-hop < ip address of the upstream router>
b) To configure interfaces fe-0/0/7 to obtain an IP address and default gateway from a DHCP server:
set interfaces fe-0/0/7 unit 0 family inet dhcp
set security zones security-zone untrust interfaces fe-0/0/7.0 host-inbound-traic
system-services dhcp
7. Create a NAT rule for source translation of all Internet-bound traffic.
set security nat source rule-set interface-nat from zone trust
set security nat source rule-set interface-nat to zone untrust
set security nat source rule-set interface-nat rule rule1 match source-address 0.0.0.0/0
destination-address 0.0.0.0/0
set security nat source rule-set interface-nat rule rule1 then source-nat interface
8. Use the “commit” command at the CLI prompt to activate the configuration.
commit
(60 pagine)
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commenti su questo manuale