SRX GUI Configuration Guide - Juniper

1 SRX GUI Version Juniper Networks, 2011/10 2 Copyright 2011 Juniper Networks, Inc. Agenda Chapter1. Basic Setup Chapter2. Firewall Policy Chapter3. NAT Chapter4. VPN Chapter5. PPPoE 3 Copyright 2011 Juniper Networks, Inc. SRX SRX100~240 GUI GUI / SRX SRX650~5800 HW Guide Switching HA IDP UTM AppFW JUNOS SRX CLI 4 Copyright 2011 Juniper Networks, Inc. Chapter1. Basic Setup 5 Copyright 2011 Juniper Networks, Inc. SRX SRX IP SRX Trust Zone Zone DCHP PC GUI Ge-0/0/0 (Srx100 Fe-0/0/0) Ge-0/0/1~Ge-0/0/15 Fe -0/0/2~Fe0/0/7 Zone : Untrust Zone : Trust DHCP service DHCP Trust Zone 6 Copyright 2011 Juniper Networks, Inc.

2 Step1 : SRX GUI 1 2 3 GUI root / password 7 Copyright 2011 Juniper Networks, Inc. Step2 : Initial Setup Start 8 Copyright 2011 Juniper Networks, Inc. Step3 : Identification 1 2 3 Root Next 9 Copyright 2011 Juniper Networks, Inc. Step4 : Network 1 2 3 DNS Next 10 Copyright 2011 Juniper Networks, Inc. Step5-1 : VLAN vlan-trust vlan-id=3 VLAN Untrust Zone G F e-0/0/0 Vlan Next Edit 11 Copyright 2011 Juniper Networks, Inc.

3 Zone : Untrust Ge-0/0/0 Ip = dhcp Zone : Trust Ge-0/0/1 Fe-0/0/2~Fe-0/0/7 vlan = vlan-trust ip = SRX210 Zone : Untrust Ge-0/0/0 Ip = Zone : Trust Fe -0/0/2~Fe-0/0/7 vlan = vlan-trust ip = Zone : Dmz Ge-0/0/1 ip = 12 Copyright 2011 Juniper Networks, Inc. Step5-2 : VLAN Edit vlan-trust << Save Next 1 2 13 Copyright 2011 Juniper Networks, Inc. Step6-1 : Interfaces : Ge-0/0/0 dhcp Next Ge-0/0/0 Edit 1 2 14 Copyright 2011 Juniper Networks, Inc.

4 Step6-2 : Interfaces : Edit address 3 DHCP IP Address PPPoE IP Address Save 1 2 3 15 Copyright 2011 Juniper Networks, Inc. Step6 : Interfaces PPPoE PPPoE Properties Save 1 2 16 Copyright 2011 Juniper Networks, Inc. Step6-3 : Interfaces : Zone /Zone Add 17 Copyright 2011 Juniper Networks, Inc. Zone Interface(s) Security Zone SRX Firewall Policy Zone : BLIUE Zone : RED Firewall Policy Zone : BLIUE Zone : BLUE 18 Copyright 2011 Juniper Networks, Inc.

5 Step6-4 : Interfaces : Zone 1 Zone Add new zone Zone Save 2 3 5 dmz Zone 4 19 Copyright 2011 Juniper Networks, Inc. Step6-5 : Interfaces : Zone Zone Next 2 1 20 Copyright 2011 Juniper Networks, Inc. Step7 : J-web J-web Commit Commit Next 1 2 3 21 Copyright 2011 Juniper Networks, Inc. Step8 : NTP TimeZone NTP Next 1 2 3 4 22 Copyright 2011 Juniper Networks, Inc. Step9 : Back Commit 1 Commit Commit 2 23 Copyright 2011 Juniper Networks, Inc.

6 Step10 : J-web : Step3 1 2 24 Copyright 2011 Juniper Networks, Inc. Step10 : J-web : J-web J-web Action Help Logout 25 Copyright 2011 Juniper Networks, Inc. Step10 : J-web : Congigure Configure 26 Copyright 2011 Juniper Networks, Inc. Step10 : J-web : Dashboard Dashboard 27 Copyright 2011 Juniper Networks, Inc. Step10 : J-web : Monitor Monitor 28 Copyright 2011 Juniper Networks, Inc.

7 Step10 : J-web : Maintain Maintain 29 Copyright 2011 Juniper Networks, Inc. Step10 : J-web : Troubleshoot Troubleshoot 30 Copyright 2011 Juniper Networks, Inc. Chapter2. Firewall Policy 31 Copyright 2011 Juniper Networks, Inc. - Zone : Untrust - Zone : Trust - Zone : Untrust - Zone : Trust - Zone : Dmz all Policy : trust-to-untrust all Policy : trust-to-untrust Policy : untrust-to-dmz 32 Copyright 2011 Juniper Networks, Inc. Step1 : 1 2 3 FW FW Configure Tasks Configure Launch Firewall Policy Wizard 5 4 33 Copyright 2011 Juniper Networks, Inc.

8 Step2 : 1 Add 34 Copyright 2011 Juniper Networks, Inc. Step3-1 : 1 SRX Add Zone/Address Pair IP Add 2 3 4 5 35 Copyright 2011 Juniper Networks, Inc. Step3-2 : 1 1 36 Copyright 2011 Juniper Networks, Inc. Step4-1 : Source zone/address Destination zone/address Application Action Log (Option) Save 1 2 3 4 5 7 6 37 Copyright 2011 Juniper Networks, Inc.

9 Step4-2 : Commit 38 Copyright 2011 Juniper Networks, Inc. Step5-1 : Source Zone Destination Zone FW Reorder FW 1 39 Copyright 2011 Juniper Networks, Inc. Step5-2 : FW Commit 1 2 40 Copyright 2011 Juniper Networks, Inc. Step6-1 : Configure Security Policy Apply Policy 1 2 3 4 41 Copyright 2011 Juniper Networks, Inc. Step6-2 : From/To Zone Filter 1 2 3 42 Copyright 2011 Juniper Networks, Inc.

10 Step6-3 : Zone Zone Zone FW Permit Deny 43 Copyright 2011 Juniper Networks, Inc. Step7 : Configure Security Policy Elements Address Book Add 1 2 3 44 Copyright 2011 Juniper Networks, Inc. Step8 : GUI Commit GUI JUNOS CLI Commit Compare Discard Commit GUI Action 1 Commit 2 45 Copyright 2011 Juniper Networks, Inc.