Juniper SRX550 Setup Manual

Brand: Juniper

Model: SRX550

Type: Setup Manual

The SRX550 High Memory Services Gateway is a large branch oce

gateway that combines security, routing, switching, and WAN interfaces

with next-generation ﬁrewall and advanced threat mitigation capabilities

for cost-eective, secure connectivity across distributed enterprise

locations. The services gateway simpliﬁes network complexity, protects and

prioritizes network resources, and improves user and application experience.

The SRX550 High Memory Services Gateway comes with 4 GB of DRAM

memory and 8 GB of ﬂash memory.

How to Set Up Your SRX550 High Memory Services Gateway

Package Contents

Back Panel

Front Panel

Speciﬁcation Value

Dimensions (H x W x D) 3.5 in. x 17.5 in. x 18.2 in.

Chassis weight 21.96 lb

Average power consumption 85 W

Average heat dissipation 238 BTU/hr

Relative humidity 5% to 90%, noncondensing

Noise level 51.8 dB per ISO 7779 standard

g009055

USB cable

SRX550

AC power supply

Mounting br

ackets

Warranty and Registration

Information

DB9 adapter

Screws

• End-User License Agreement

• Safety Guide

• Quick Start Guide

Power cableRJ45 cable

g00

7818

Power supply slotsACE slot

Grounding point

Air ﬁlter cover

ESD pointStorage slot

g009056

LEDs

Serial

console

port

USB

console

port

AUX

port

point

USB 0 and

USB 1 ports

Power

button

Reset Conﬁg

button

Gigabit

Ethernet ports

SFP

Ethernet ports

Mini-PIM

slots

GPIM

slots

Mounting

bracket

How to Set Up Your SRX550 High Memory Services Gateway

Gather Conﬁguration Information

Gather information about your network and the conﬁguration settings that you

will use to conﬁgure the device.

Required

Device name

Root authentication

Optional

NTP server name or IP address

Licenses

Internet zone

Static IP (provided by ISP)

Port number

DMZ

Network IP address

Port number

Internal zone

Name of the zone

Network IP address

Port number

DHCP server

Security policies

Remote client IP pool range

Destination NAT

Internal zones for which source NAT has been added

IP address or hostname

Factory-Default Settings

Security Policies

Source Zone Destination Zone Policy Action

trust untrust permit

trust trust permit

untrust trust deny

NAT Rules

Source Zone Destination Zone Policy Action

trust untrust Source NAT to untrust zone

interface

Interfaces

Port Label Interface Security Zone DHCP State IP Address

0/0 ge-0/0/0 untrust Client Dynamically

assigned

0/1 ge-0/0/1 trust Server 192.168.1.1/24

0/2 ge-0/0/2 trust Server 192.168.2.1/24

0/3 ge-0/0/3 trust Server 192.168.3.1/24

0/4 ge-0/0/4 trust Server 192.168.4.1/24

0/5 ge-0/0/5 trust Server 192.168.5.1/24

Initial Conﬁguration Process

g007680

Connect

the Grounding

Cable

Verify the

Settings

Connect the

Management Device

to the Ethernet Port

Conﬁgure

Root

Authentication

to the CLI

Connect the

Management Device

to the Console Port

Power On

the Device

How to Set Up Your SRX550 High Memory Services Gateway

Connect the Grounding Cable

1. Connect the grounding cable to a proper earth ground.

2. Place the grounding cable lug over the grounding point on the upper rear of

the chassis.

NOTE: A licensed electrician must attach a cable lug to the grounding

cable. A cable with an incorrectly attached lug can damage the device.

3. Secure the grounding cable lug to the grounding point with the screws. Apply

between 6 in.-lb (0.67 Nm) and 8 in.-lb (0.9 Nm) of torque to the screws.

NOTE: The device should be permanently connected to ground during

normal operation.

100-240V~10A MAX

50~60 HZ

DC OK

AC OK

Grounding screw

(M3 screw)

Grounding

lug

Grounding

point

g007820

Power On the Device

NOTE: Before connecting the device to the power supply, attach an ESD

strap to an ESD point and place the other end of the strap around your

bare wrist.

1. Connect the power supply adapter to the power supply point on the device

and to a power source. We recommend using a surge protector. You must

allow the device between ﬁve and seven minutes to boot after you power it on.

g03410

2. Secure the power cord to the cable tie holder using a tie-wrap.

How to Set Up Your SRX550 High Memory Services Gateway

3. Note the following indications. Wait until the STATUS LED is solid green

before proceeding to the next step.

g00905

LED State

Power • Solid green (receiving power).

STATUS • Solid green (operating normally).

ALARM • Amber (operating normally–the LED might glow amber if a

rescue conﬁguration is not set. This is not a panic condition).

MPIM-1 and MPIM-2 LEDs • O (Mini-PIM not present or not detected).

• Solid green (Mini-PIM is operating normally).

• Red (Mini-PIM hardware failure or counterfeit check failed).

HA • O (HA not enabled).

• Solid green (all HA links are available).

RPS • Solid green (redundant power supply is operating normally).

ACE • The ACE LED is not functional.

RPS • Solid green (the services gateway is transferring data to or

from the optional storage device).

Connect the Management Device

to the Console Port

1. Attach an electrostatic discharge (ESD) grounding strap to your bare wrist,

and connect the strap to the ESD point on the chassis.

2. Connect one end of the Ethernet cable to the Console port on your services

gateway.

g009068

Console port

RJ-45 cable

3. Connect the other end of the Ethernet cable to the DB-9 adapter, and then

connect the adapter to the serial port on the management device. Use the

following values to conﬁgure the serial port:

Baud rate—9600; Parity—N; Data bits—8; Stop bits—1; Flow control—None

1. Log in as the root user. Do not enter any password.

2. Start the CLI and enter conﬁguration mode.

root@%cli

root>congure

root#

How to Set Up Your SRX550 High Memory Services Gateway

Conﬁgure Root Authentication

1. Set the root authentication password by entering a cleartext password, an

encrypted password, or an SSH public key string (DSA or RSA).

root# set system root-authentication plain-text-password

New password: password

Retype new password: password

2. Commit the conﬁguration to activate it on the device.

root# commit

Connect the Management Device to the Ethernet Port

1. Connect any of the network ports numbered 0/1 through 0/5 to the Ethernet

port on the management device, using an RJ-45 cable.

2. Ensure that the management device acquires an IP address. The IP address

should be on the corresponding IP subnet for the interface you connected to

in step 1. The device functions as a DHCP server and will assign an IP address

to the management device.

For example, if you are connected to port 0/1, then the IP address of the

management device should be from the 192.168.1.x network. If an IP address

is not assigned to the management device, manually conﬁgure an IP address.

Do not assign the 192.168.1.1 IP address to the management device, as this IP

address is assigned to the device. You can use the ipconﬁg (or ifconﬁg for

Macintosh or Linux users) command to verify the IP address.

Refer to the Interfaces table on page 2 for information on the subnet for each

interface.

g00906

Ethernet port

RJ-45 cable

Ethernet port

Verify the Settings

Launch a Web browser from the management device and access the services

gateway using the URL http://192.168.1.1 (if connected to port 0/1). For ports

other than 0/1, access the services gateway using the URL http://192.168.x.1,

where x is the port number. Refer to the Interfaces table on page 2. The J-Web

initial conﬁguration and that your SRX550 High Memory Services Gateway is

ready for use.

If the page does not load, perform the following checks to see if you can identify

the problem:

• Check if the cable connecting the ISP-supplied device to the SRX Series

device is ﬁrmly seated.

• Use the CLI ping command to verify that the SRX550 High Memory Services

Gateway can be accessed from the management device.

• Check if the Ethernet port has acquired the IP address on the correct

sub-network.

• Clear the browser cache on the management device.

After you complete these steps, the device can pass trac from any trust port to

the untrust port. You can connect other devices to the SRX Series device.

NOTE: With this step, you have successfully completed the initial

conﬁguration, and your SRX550 High Memory Services Gateway is ready

for use. You can proceed with customizing the conﬁguration according to

your requirements.

Power O the Device

To power o the device, press the Power button on the front of the device and

hold it for 10 seconds. To remove power completely from the device, unplug the

AC power cord or DC power supply cable. After powering o a power supply,

wait at least 60 seconds before turning it back on.

NOTE: Graceful shutdown is not supported on the SRX550 High Memory

Services Gateway.

Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper

Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks

reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Part Number: 530-066672 Revision 01, February 2016.

Reset the Conﬁguration

Use the RESET CONFIG button to restore the device to the factory-default

conﬁguration or to a rescue conﬁguration. To press the RESET CONFIG button,

insert a small probe (such as a straightened paper clip) into the pinhole on the

front panel.

Pressing and quickly releasing the RESET CONFIG button loads and commits

the rescue conﬁguration. The rescue conﬁguration is a previously committed,

valid conﬁguration set through J-Web or the CLI. The STATUS LED is solid amber

during this time.

Pressing and holding the RESET CONFIG button for 15 seconds or more,

until the STATUS LED is solid amber, deletes all conﬁgurations (backup

conﬁgurations and rescue conﬁguration), and loads and commits the factory