Juniper SRX320 Manual

The SRX320 Services Gateway consolidates security, routing, switching,

and WAN interfaces for small distributed enterprises. With advanced threat

mitigation capabilities, the services gateway provides cost-eective and secure

connectivity across distributed enterprises.

With a desktop form-factor chassis, the SRX320 Services Gateway has six

1-Gigabit Ethernet ports, two 1-Gigabit Ethernet SFP ports, 4 GB of DRAM

memory, and 8 GB of ﬂash memory. The SRX320 Services Gateway is available

with or without Power over Ethernet (PoE) capability. In the PoE model, the six

Ethernet ports are PoE capable.

How to Set Up Your SRX320 Services Gateway

Package Contents

Back Panel

Front Panel

Speciﬁcation SRX320 SRX320-PoE

Dimensions (D x W x H) 7.52 in. x 11.81 in. x 1.73 in.

(19.10 cm x 29.99 cm x 4.39 cm)

7.52 in. x 11.81 in. x 1.73 in.

(19.10 cm x 29.99 cm x 4.39 cm)

Chassis weight 3.28 lb (1.49 kg) 3.4 lb (1.54 kg)

Average power consumption 27 W 112 W

Average heat dissipation 157 BTU/hr 755 BTU/hr

Relative humidity 5% to 90%, noncondensing 5% to 90%, noncondensing

Noise level 35 dBA 40 dBA

NOTE: Check the parts in the shipment against the items on the packing

list. If anything is missing or damaged, contact your Juniper Networks

customer service representative.

g000

752

DB-9 adapter

USB cableRJ-45 cable

SRX320

Power supply

adapter

Warranty and Registration

Information

• End User License Agreement

• Safety Guide

• Quick Start Guide

Power cable

g000754

DC inputGrounding point

Lock Cable tie holderFans

Power

button

LEDs

Reset Conﬁg

button

Serial Console

port Mini-PIM slots

1G SFP

ports

1G Ethernet

ports

USB

port

Mini-USB

Console port

g000753

How to Set Up Your SRX320 Services Gateway 2

Factory-Default Settings

Security Policies

Source Zone Destination Zone Policy Action

trust untrust permit

trust trust permit

NAT Rules

Source Zone Destination Zone Policy Action

trust untrust Source NAT to untrust zone

interface

Interfaces

Port Label Interface Security Zone DHCP State IP Address

0/0 ge-0/0/0 untrust Client Unassigned

0/1 to 0/7 VLAN Interface

irb.0 (ge-0/0/1 to

ge-0/0/7)

trust Server 192.168.1.1/24

Services

SSH

HTTPS

NETCONF over SSH

Screens

Basic set of screens are enabled on the untrust zone

Initial Conﬁguration Process

Install Device

in a Rack

g04345

Connect the

Grounding Cable

(Optional)

Verify the

Settings

Conﬁgure

Using J-Web

Power On

the Device

Install the Device in a Rack

1. Position a mounting bracket on each side of the chassis. Use a number-1

Phillips screwdriver to install the screws that secure the mounting brackets

and power supply adapter tray to the chassis.

For 75 W power supply adapter:

g00094

For 280 W power supply adapter:

g00094

2. Place the power supply adapter in the tray.

3. Have one person grasp the sides of the device, lift it, and position it in the rack.

Align the bottom hole in each mounting bracket with a hole in each rack rail,

making sure that the chassis is level.

4. Have a second person install a mounting screw into each of the two aligned

holes. Use a number-3 Phillips screwdriver to tighten the mounting screws.

How to Set Up Your SRX320 Services Gateway 3

5. Install the second screw in each mounting bracket.

g000951

6. Verify that the mounting screws on one side of the rack are aligned with the

mounting screws on the opposite side and that the device is level.

The SRX320 Services Gateway can also be mounted on a desk or a wall. For

details, see the SRX320 Services Gateway Hardware Guide.

NOTE: The mounting kits are not shipped with the device and must be

ordered separately.

Connect the Grounding Cable (Optional)

1. Attach an ESD strap to an ESD point and place the other end of the strap

around your bare wrist.

2. Connect the grounding cable to a proper earth ground.

3. Place the grounding cable lug over the grounding point on the rear of the

chassis.

NOTE: A licensed electrician must attach a cable lug to the grounding

cable. A cable with an incorrectly attached lug can damage the device.

4. Secure the grounding cable lug to the grounding point with the screw.

g000

756

Grounding point

on the chassis

Grounding lug

ounding

rew

Power On the Device

NOTE: Before connecting the device to the power supply, attach an ESD

strap to an ESD point and place the other end of the strap around your

bare wrist.

1. Plug the DC connector end of the power cable into the power connector on

the rear of the device.

g000757

2. Plug the AC adapter end of the power cable into an AC power outlet.

3. Turn on the power to the AC power receptacle.

How to Set Up Your SRX320 Services Gateway 4

4. Note the following LED indications. Wait until the STATUS LED is solid green

before proceeding to the next step.

g000755

LED State

ALARM •Solid amber (noncritical alarm).

•Solid red (critical alarm).

•O (no alarms).

STAT •Solid green (operating normally).

•Solid red (error detected).

PWR •Solid green (receiving power).

•Solid red (power failure).

•O (no power).

HA •Solid green (all HA links are available).

•Solid amber (some HA links are unavailable).

•Solid red (HA links are not functional).

•O (HA is disabled).

mPIM1, mPIM2 •Green (mini-PIM is present and detected by the device).

•O (mini-PIM is not present or not detected by the device).

Conﬁgure the Device Using J-Web

To conﬁgure the device using J-Web, follow the steps in this section.

Connect the Management Device

1. To conﬁgure the device using J-Web (recommended), connect any of the

network ports numbered 0/1 through 0/5 to the Ethernet port on the

management device, using an RJ-45 cable.

g00097

Ethernet port

RJ-45 cable Ethernet port

NOTE: The ge-0/0/0 interface (port 0/0) is a WAN interface. Do not

use this port for the initial conﬁguration procedure.

If you will be using the Default setup mode to conﬁgure the device, use

only port 0/1. For information on the setup modes, see the following

2. The services gateway functions as a DHCP server and automatically assigns

an IP address to the management device. Ensure that the management

device acquires an IP address on the 192.168.1.0/24 subnetwork from the

device.

If an IP address is not assigned to the management device, manually

conﬁgure an IP address in the 192.168.1.0/24 subnetwork. Do not assign

the 192.168.1.1 IP address to the management device, as this IP address is

assigned to the services gateway. By default, the DHCP server is enabled

on the L3 VLAN interface, irb.0 (interface ge-0/0/1 to ge-0/0/5). which is

conﬁgured with an IP address of 192.168.1.1/24.

How to Set Up Your SRX320 Services Gateway 5

1. Access the J-Web interface using the URL https://192.168.1.1. The

recommended browser is Internet Explorer version 9 or 10, or Mozilla Firefox

version 38 (or later).

2. Select one of the following setup modes:

•Guided Setup (uses a dynamic IP address)—Allows you to set up the

device in a custom security conﬁguration. You can select either the Basic

or the Expert option.

•Default Setup (uses a dynamic IP address)—Allows you to quickly set up

the device with the default conﬁguration. Any additional conﬁguration can

be done after the wizard setup is completed.

•High Availability—Allows you to set up a chassis cluster with a default basic

conﬁguration.

NOTE: The initial conﬁguration requires that you specify the device

name and root password. You can skip all the other steps and go directly

to the Conﬁrm & Apply page to apply the conﬁguration.

Conﬁgure the Device Using the Guided Setup Mode

1. Connect port 0/0 to the ISP device to obtain a dynamic IP address.

2. Select the expertise level as Basic or Expert.

The following table compares the Basic and Expert levels:

Options Basic Expert

Number of internal zones

allowed

3 ≥ 3

Internet zone conﬁguration

options

•Static IP

•Dynamic IP

•Static IP

•Static pool

•Dynamic IP

Internal zone service

conﬁguration

Allowed Allowed

Internal destination NAT

conﬁguration

Not allowed Allowed

How to Set Up Your SRX320 Services Gateway 6

3. Conﬁgure the basic settings:

a. Device name

b. Password for the root account

c. Time

4. Conﬁgure the security topology:

a. Internet zone (Untrust)

b. Internal zones (Trust)

c. DMZ

5. Conﬁgure the security policy:

a. Licenses (Security services)

b. DMZ policy

c. Internet and internal policies

d. Remote VPN

6. Conﬁgure Network Address Translation:

a. Internal Source NAT

b. Internal Destination NAT

c. DMZ Destination NAT

7. Review the settings and click Apply Settings.

NOTE: Check the connectivity from the management device to the SRX

Series device. You might lose connectivity to the SRX Series device if

you have changed the internal zone IP. Click the URL for reconnection

instructions on the Conﬁrm & Apply page to reconnect, if required.

8. Click Done to complete the setup.

Conﬁgure the Device Using the Default Setup Mode

1. Connect port 0/0 to the ISP device to obtain a dynamic IP address.

NOTE: Verify that the management device is connected to port 0/1 on

the services gateway before proceeding to the next step.

2. Conﬁgure the basic settings – device name, root account information, and

system time.

How to Set Up Your SRX320 Services Gateway 7

3. Conﬁgure the security policy – licenses.

4. Review the settings and click Apply Settings. Click Done to complete the

setup.

NOTE: Check the connectivity from the management device to the SRX

Series device. You might lose connectivity to the SRX Series device if

you have changed the internal zone IP. Click the URL for reconnection

instructions on the Conﬁrm & Apply page to reconnect, if required.

You can also conﬁgure the services gateway using the CLI, by connecting to the

Console port. For details, see the SRX320 Services Gateway Hardware Guide.

Verify the Settings

Access http://www.juniper.net to ensure that you are connected to the Internet.

This connectivity ensures that you can pass trac through the services gateway.

If the page does not load, perform the following checks to see if you can identify

the problem:

•Verify your conﬁguration settings, and ensure that you have applied the

conﬁguration.

•Check if the ISP-supplied device connecting your SRX Series device to the

Internet is turned on and working properly. Try turning it o and on again.

After you complete these steps, the SRX Series device can pass trac from any

trust port to the untrust port.

NOTE: With this step, you have successfully completed the initial

conﬁguration, and your SRX320 Services Gateway is ready for use.

Change the Conﬁguration Settings (Optional)

After you complete the initial setup conﬁguration, you can access the J-Web

setup wizard by clicking Conﬁguration Wizards > Set Up. You can either edit

the existing settings or create a new conﬁguration. If you choose to create a

new conﬁguration, then all the current conﬁguration in the services gateway

will be deleted.

Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are trademarks of Juniper

Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks

reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Part Number: 530-072016 Rev. 01, October 2016.

Power O the Device

You can power o the device in one of the following ways:

• Graceful shutdown—Press and immediately release the Power button.

• Forced shutdown—Press the Power button, and hold it for 10 seconds.

After powering o a power supply, wait at least 60 seconds before turning it

back on.

Reset the Conﬁguration

Use the RESET CONFIG button to restore the device to the factory-default

conﬁguration or to a rescue conﬁguration. To press the RESET CONFIG button,

insert a small probe (such as a straightened paper clip) into the pinhole on the

front panel.

Pressing and quickly releasing the RESET CONFIG button loads and commits

the rescue conﬁguration. The rescue conﬁguration is a previously committed,

valid conﬁguration set through J-Web or the CLI. The STATUS LED is solid amber

during this time.

Pressing and holding the RESET CONFIG button for 15 seconds or more,

until the STATUS LED is solid amber, deletes all conﬁgurations (backup

conﬁgurations and rescue conﬁguration), and loads and commits the factory

conﬁguration.

NOTE: After resetting the device, check the device status by viewing the

LEDs on the front panel. For information on the LED states, see the Power

On the Device section.

Next Steps

For information on conﬁguring features on your services gateway, refer to the

following:

•Junos OS Documentation/Feature Conﬁguration

http://www.juniper.net/techpubs/en_US/release-independent/junos/

information-products/pathway-pages/srx-series/product/index.html

•Getting Started Knowledge Base Article

https://kb.juniper.net/InfoCenter/index?page=content&id=KB15694

Reference

Technical Support

http://www.juniper.net/support/requesting-support.html

SRX320 Services Gateway Hardware Guide

http://www.juniper.net/techpubs/en_US/release-independent/junos/

information-products/pathway-pages/hardware/srx320/index.html

Supported Transceivers

https://pathﬁnder.juniper.net/hct/product/#prd=SRX320

Other manuals for SRX320

This manual suits for next models

Table of contents

Other Juniper Network Hardware manuals

Juniper

Juniper 16-PORT GIGABIT ETHERNET XPIMS User manual

Juniper

Juniper MX10016 Installation instructions

Juniper

Juniper SSR120 Installation instructions

Juniper

Juniper JSA7800 User manual

Juniper

Juniper JSA3800 Installation instructions

Juniper

Juniper MX150 User manual

Juniper

Juniper JSA7800 User manual

Juniper

Juniper CTP2000 Series Installation instructions

Juniper

Juniper SRX300 Series User manual

Juniper

Juniper SSR1300 User manual

Juniper

Juniper Day One+ QFX5700 User manual

Juniper

Juniper NFX150-S1 User manual

Juniper

Juniper WX 15 User manual

Juniper

Juniper QFX10016 User manual

Juniper

Juniper IDP 800 User manual

Juniper

Juniper CSE2000 Manual

Juniper

Juniper SSR1400 Installation instructions

Juniper

Juniper SSR1500 User manual

Juniper

Juniper EX9200 Series User manual

Juniper

Juniper MX SERIES - FAN TRAY UPGRADE REV1 4-2010 User manual

Juniper

Juniper MX150 Installation instructions

Juniper

Juniper MX104 User manual

Juniper

Juniper MX480 Installation instructions

Juniper

Juniper WX 3400 User manual

Popular Network Hardware manuals by other brands

Matrix Switch Corporation

Matrix Switch Corporation MSC-HD161DEL product manual

B&B Electronics

B&B Electronics ZXT9-IO-222R2 product manual

Yudor

Yudor YDS-16 user manual

D-Link

D-Link ShareCenter DNS-320L datasheet

Samsung

Samsung ES1642dc Hardware user manual

Honeywell Home

Honeywell Home LTEM-PV Installation and setup guide

evertz

evertz 7700 Series manual

D-Link

D-Link ShareCenter DNS-343 Quick installation guide

Asante

Asante AsanteBridge 1012 user guide

FireBrick

FireBrick FB2700 user manual

Audiovox Electronics

Audiovox Electronics ARWH2T user manual

ADC

ADC DSX-1 Operational Procedures Guide

NetComm

NetComm NF2 user guide

Alcatel-Lucent

Alcatel-Lucent 5620 user guide

Dell EMC

Dell EMC XC6420 Series Solution guide

Lanner

Lanner NCA-1020A user manual

Allied Telesis

Allied Telesis AT-TN121-A Specifications

Arista

Arista CCA-ETM-Q12 quick start guide