Quick Start Guide SRX550 High Memory Services Gateway

Quick Start Guide SRX550 High Memory Services Gateway

Quick Start Guide SRX550 High Memory Services Gateway Created Date: 20201007134028Z ...

The SRX550 High Memory Services Gateway is a large branch office gateway that combines security, routing, switching, and WAN interfaces with ...

After you complete these steps, you can start using the SRX550 HM on your network right away. You can go back and customize settings at any time.

Original Document

If the viewer doesn’t load, open the PDF directly.

Extracted Text

Quick Start Guide
SRX550 High Memory Services Gateway
IN THIS GUIDE SRX550 High Memory Services Gateway Overview | 1 SRX550 High Memory Front Panel and Rear Panel | 2 Factory-Default Settings | 3 Install the Device in a Rack | 5 Connect the Grounding Cable | 6 Power On the Device | 8 Configure Using J-Web | 9 Plug and Play | 11 Customize the Basic Configuration with J-Web | 12 Next Steps | 13 Reference | 13
SRX550 High Memory Services Gateway Overview
The SRX550 High Memory Services Gateway is a large branch office gateway that combines security, routing, switching, and WAN interfaces with next-generation firewall and advanced threat mitigation capabilities for cost-effective, secure connectivity across distributed enterprise locations. The services gateway simplifies network complexity, protects and prioritizes network resources, and improves user and application experience. The SRX550 High Memory Services Gateway comes with 4 GB of DRAM memory and 8 GB of flash memory.
Package Contents
The SRX550 High Memory Services Gateway is shipped with the following parts:

2 � RJ-45 cable with DB-9 adapter � AC or DC power supply � Power cable (for AC power supply only) � USB cable � Mounting brackets and screws � Documentation Roadmap and Product Warranty � End User License Agreement
Register the Product
Register product serial numbers on the Juniper Networks website and update the installation base data if there is any addition or change to the installation base or if the installation base is moved. Juniper Networks will not be held accountable for not meeting the hardware replacement service-level agreement for products that do not have registered serial numbers or accurate installation base data. Register your product at https://tools.juniper.net/svcreg/SRegSerialNum.jsp. Update your installation base at https://www.juniper.net/customers/csc/management/updateinstallbase.jsp.
SRX550 High Memory Front Panel and Rear Panel
Figure 1: Front Panel Components

3 Figure 2: Rear Panel Components

Power supply Power supply slot 1 slot 0

ACE slot

Air filter cover

g007818

Grounding point

Storage slot

ESD point

NOTE: Check the parts in the shipment against the items on the packing list. If anything is missing or damaged, contact your Juniper Networks customer service representative.

Specifications
Specification Dimensions (H x W x D)
Chassis weight Average power consumption Average heat dissipation Relative humidity

SRX550 HM 3.5 in. x 17.5 in. x 18.2 in. (8.89 cm x 44.45 cm x 46.23 cm) 21.96 lb (9.96 kg) 85 W 238 BTU/hr 5% to 90%, noncondensing

Factory-Default Settings

The SRX550 High Memory device is shipped with the following factory-default settings:

Table 1: Security Policies

Source Zone

Destination Zone

Policy Action

trust

trust

permit

trust

untrust

permit

4 Table 2: NAT Rules

Source Zone

Destination Zone

Policy Action

trust

untrust

Source NAT to untrust zone interface

Table 3: Ethernet Interfaces

Port Label

Interface

Security Zone DHCP State

0/0 and 0/9

ge-0/0/0 and ge-0/0/9 untrust

Client

0/1

ge-0/0/1

trust

Server

0/2

ge-0/0/2

trust

Server

0/3

ge-0/0/3

trust

Server

0/4

ge-0/0/4

trust

Server

0/5

ge-0/0/5

trust

Server

IP Address Unassigned 192.168.1.1/24 192.168.2.1/24 192.168.3.1/24 192.168.4.1/24 192.168.5.1/24

Table 4: LTE Interfaces Interface

Security Zone

cl-1/0/0

N/A

dl0 (logical)

untrust

Only if the LTE Mini-PIM is present

IP Address N/A ISP assigned*

The SRX550 High Memory device is shipped with the following services and protocols enabled by default:

Table 5: Services, Protocols, and Startup Mode

Services

Protocols

Device Startup Mode

SSH HTTPS NETCONF over SSH

RSTP (all interfaces)

Switching

To provide secure traffic, a basic set of screens are configured on the untrust zone.

5
Install the Device in a Rack
Before you begin the installation, review General Safety Guidelines and Warnings. Make sure you have someone available to help you do the installation. You will need to provide your own rack mount screws and a number two Phillips (+) screwdriver. 1. Wrap and fasten one end of the electrostatic discharge (ESD) grounding strap around your bare wrist, and connect the
other end to a site ESD point. 2. Position a mounting bracket on each side of the chassis. Use a number two Phillips (+) screwdriver to install the screws
that secure the mounting brackets to the chassis. Use either the front mount position or the center mount position. Figure 3: Securing the Mounting Brackets (Front-Mount)
Figure 4: Securing the Mounting Brackets (Center-Mount)
3. Lift the device and position it in the rack. Line up the bottom hole in each mounting bracket with a hole in each mounting rail, making sure the device is level.
4. While you are holding the device in place, have a second person insert and tighten the rack mount screws to secure the mounting brackets to the rack. Make sure to tighten the screws in the two bottom holes first and then tighten the screws in the two top holes next.

g009064

6 Figure 5: Securing the Chassis to the Rack
5. Check that the mounting brackets on each side of the rack are lined up with each other.
Connect the Grounding Cable
1. Attach an ESD strap to an ESD point and place the other end of the strap around your bare wrist. 2. Connect the grounding cable to a proper earth ground. Place the grounding cable lug over the grounding point on the
upper rear of the chassis. NOTE: The device should be permanently connected to ground during normal operation. A licensed electrician must attach a cable lug to the grounding cable. A cable with an incorrectly attached lug can damage the device.
3. Secure the grounding cable lug to the grounding point with the screws.

7 Figure 6: Connecting the Grounding Cable

8
Power On the Device
NOTE: Before connecting the device to the power supply, attach an ESD strap to an ESD point and place the other end of the strap around your bare wrist.
1. If you are using the AC model, perform the following steps: a. Connect the power supply adapter to the power supply point on the device and to a power source. We recommend using a surge protector. You must allow the device between five and seven minutes to boot after you power it on. Figure 7: Connecting the Power Cable
b. Secure the power cord to the cable tie holder using a tie-wrap. 2. If you are using the DC model, perform the following steps:
WARNING: Before performing the following procedure, ensure that there is no power in the DC circuit. To ensure that all power is cut off, locate the circuit breaker on the panel board that services the DC circuit, switch the circuit breaker to the OFF (0) position, and tape the switch handle of the circuit breaker in the OFF position.
a. Ensure that the voltage across the DC power source cable leads is 0 V and that the cable leads do not become active while you are connecting DC power.
b. Verify that the DC power cables are correctly labeled before making connections to the power supply. In a typical power distribution scheme where the return is connected to chassis ground at the battery plant, you can use a multimeter to verify the resistance of the -48V and RTN DC cables to chassis ground: � The cable with very high resistance (indicating an open circuit) to chassis ground will be connected to the V(input) DC power input terminal.

9 � The cable with very low resistance (indicating a closed circuit) to chassis ground will be connected to the V+
(return) DC power input terminal.
c. Remove the clear plastic cover from the terminal studs on the faceplate. d. Remove the screws on the terminals by using a Phillips (+) screwdriver, number 2. e. Secure each positive (+) DC source power cable lug to a RTN (return) terminal. Secure each negative (�) DC source
power cable lug to a -48V (input) terminal. f. Replace the clear plastic cover over the terminal studs on the faceplate. g. Remove the tape from the switch handle of the circuit breaker on the panel board that services the DC circuit and
switch the circuit breaker to the ON (|) position. 3. Turn on the power to the AC power receptacle.

4. Note the following LED indications. Wait until the STATUS LED is solid green before proceeding to the next step. Table 6: LED States

LED

State

POWER

� Solid green (receiving power).

STATUS

� Solid green (operating normally).

ALARM MPIM-1 and MPIM-2
HA RPS

� Amber (operating normally�the LED might glow amber if a rescue configuration is not set. This is not a panic condition).
� Off (Mini-PIM not present or not detected). � Solid green (Mini-PIM is operating normally). � Red (Mini-PIM hardware failure or counterfeit check failed).
� Off (HA not enabled). � Solid green (all HA links are available).
� Solid green (redundant power supply is operating normally).

ACE

The ACE LED is not functional.

STORAGE

� Solid green (the services gateway is transferring data to or from the optional storage device).

Configure Using J-Web
To configure using J-Web:

10 1. Connect any of the network ports numbered 0/1 through 0/5 on the services gateway to the Ethernet port on the
management device, using an RJ-45 cable. Figure 8: Connecting the Management Device
2. Ensure that the management device acquires an IP address. The IP address should be on the corresponding IP subnet for the interface you connected to in step 1. The device functions as a DHCP server and will assign an IP address to the management device. For example, if you are connected to port 0/1, then the IP address of the management device should be from the 192.168.1.x network. If an IP address is not assigned to the management device, manually configure an IP address. You can use the ipconfig (or ifconfig for Macintosh or Linux users) command to verify the IP address. NOTE: Do not assign the IP address 192.168.1.1 (if connected to port 0/1) to the management device, as this IP address is assigned to the SRX550 HM.
Refer to Table 3 for information on the subnet for each interface. 3. Open a browser and type https://192.168.1.1 (if connected to port 0/1). For ports other than 0/1, access the services
gateway using the URL https://192.168.x.1, where x is the port number. The Phone Home Client screen appears.

11
4. Click Skip to J-Web. NOTE: To configure the device using zero-touch provisioning (ZTP), see Configure the Device Using ZTP with Juniper Networks Network Service Controller.
5. Set a root authentication password in the Skip to J-Web screen and click Submit.
The J-Web login page appears.
Plug and Play
The SRX550 HM already has factory-default settings configured to make it a plug and play device. So all you have to do to get the SRX550 HM up and running is connect it to your LAN and WAN networks. 1. Connect the WAN network to port 0/0 to obtain a dynamic IP address. 2. Connect the LAN network to any of the ports from 0/1 through 0/5.

12 3. Check to see if the SRX550 HM is connected to the Internet. Go to http://www.juniper.net. If the page does not load,
check the Internet connection.
After you complete these steps, you can start using the SRX550 HM on your network right away. You can go back and customize settings at any time. The J-Web Setup wizard is always available to you.
Customize the Basic Configuration with J-Web
You can continue to customize the settings in J-Web. Have these values handy before you begin customizing SRX550 HM settings: � Hostname � IP address for the NTP server � IP address for the DNS server � IP address for the management interface
NOTE: To customize the configuration in Junos OS Release 15.1X49-D170, see Customize the Configuration for Junos OS Release 15.1X49-D170.
Log in to J-Web and select the configuration mode that's right for you. You can then follow the screens as they appear in the Setup wizard. � Standard--Configure basic security settings for the SRX550 HM. � Cluster (HA)--Set up the SRX550 HM in chassis cluster mode. � Passive--Set up the SRX550 HM in Tap mode. Tap mode enables the SRX550 HM to passively monitor traffic flows
across a network.

13
Next Steps
For information on configuring features on your services gateway, refer to the following: � Junos OS User Guides � Getting Started Knowledge Base Article
Reference
� Technical Support � SRX550 High Memory Services Gateway Hardware Guide � Supported Transceivers
Juniper Networks, the Juniper Networks logo, Juniper, and Junos are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Copyright � 2020 Juniper Networks, Inc. All rights reserved. Rev. 02, October 2020.