[edit]
root# set system login user admin class super-user authentication plain-text-password
New password: password
Retype new password: password
7. Commit the configuration to activate it on the services gateway.
[edit]
root# commit
8. Log in as the administrative user you configured in Step 6.
9. Configure the name of the services gateway. If the name includes spaces, enclose the
name in quotation marks (“ ”).
configure
[edit]
admin# set system host-name host-name
10. Configure the IP address and prefix length for the services gateway Ethernet interface.
[edit]
admin# set interfaces fxp0 unit 0 family inet address address/prefix-length
11. Configure the traffic interface.
[edit]
admin# set interfaces ge-0/0/0 unit 0 family inet address address/prefix-length
admin# set interfaces ge-0/0/1 unit 0 family inet address address/prefix-length
NOTE: The ge-0/0/0 interface is for the ISP, and the ge-0/0/1 interface
is for the LAN.
12. Configure the default route.
[edit]
admin# set routing-options static route 0.0.0.0/0 next-hop gateway
13. Configure basic security zones and bind them to traffic interfaces.
[edit]
admin# set security zones security-zone untrust interfaces ge-0/0/0
admin# set security zones security-zone trust interfaces ge-0/0/1
admin# set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic
system-services all
admin# set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic
protocols all
14. Configure basic security policies.
[edit]
admin# set security policies from-zone trust to-zone trust policy policy-name match
source-address any destination-address any application any
admin# set security policies from-zone trust to-zone trust policy policy-name then permit
admin# set security policies from-zone trust to-zone untrust policy policy-name match
source-address any destination-address any application any
admin# set security policies from-zone trust to-zone untrust policy policy-name then permit
NOTE: The actual configuration of the policies depends on your
requirements.
15. Check the configuration for validity.
Copyright © 2016, Juniper Networks, Inc.72
SRX340 Services Gateway Hardware Guide