Save Initials Default with airSlate SignNow

Save initials default

hi this is my juniper cyrix initial configuration video I will showing you how to get the juniper gateway up and running once you've taken out of the box or factory default SRX device I'm using the device in front of you which is an SRX wants an a model which consists of eight fast ethernet ports these ones here a 1 port for adsl VDSL connection console port for management purposes and there's also a 3G connection which you can use as a backup one connection I'll be using an Ethernet port for management purposes but you can also use this console port here on the device pause Fe 0 0 want it here so Fe 0 0 7 these are switch ports in a VLAN so they all share the same they are within the same broadcast domain and configured in a security zone called trust and the VLAN interface is assigned an IP address of 192 168 1 1 so you can reach the IP through any of these ports by default the DHCP server is enabled on the layer 3 VLAN interface as well so if you plug into any of these reports from Fe 0 0 1 so Fe 0 0 7 you'll get an IP address assigned in the 192 168 1 0 / 24 range the gateway self of courses they will 92168 door 1.1 so that's what we will be connecting to so as long as my laptop is listening for DHCP it's automatically assigned to look for a IP address then it will be assigned an IP address in that range you can also take these out of later switch pop mode so these ports I'll be showing you that in another video so you can put them into a layer 3 rooted interface so you can use them as a route interfaces and assign them IP addresses individually if you wanted to also security zones which I'll cover in a later video as well they're basically used to group one of my interfaces then security policies and other settings are applied to security zones so you might have an internal Zone DMZ zone and an Internet zone and security policies are created between them which interface is about to by default the internals on our internal network they've called it trust and the external law of the internet or the one they've called it on trust also by default there's a source not so on trusts own interface is also configured so users can get out to the internet using a single public IP address so once we go through the wizard get the SRX up and running these settings are completed by default in this video I'll only be showing you how to get it up and running and then we can go and have a look at the interface in another video so there's a couple of security policies as welcome for your body form which allows trust to one soft zone traffic which is basically internal to out to the internet but denies the other way so denies one trust zone to trust on traffic and this single IP sorry this single port here fe 0 0 0 is configured in the security zone on trust so the internet side and is assigned as a DHCP client so it's there to receive an IP address if you connected to now ice P for example so I put my cable in so the my laptop which is connected to the SRX on this port here so it's plugged in now and if we open up a command prompt I'll just make sure we've got an IP address in the wall 92168 dot one dot 0 24 range which it has which is one nine two one six eight dot one dot three so it should be good to go we should be able to connect to the a web interface and configure the SRX device so if we open up Mozilla Firefox and browse to it by the way it's HTTP colon slash slash 192.168.1.1 that Scott was there so the username is root and there is no password so just log in to the device okay so that spot was to the introduction initial set up you have to follow this visit and just just follow the menu on the left-hand side it will take you through it as you start from here and you keep clicking next so if we click start here and we come to the configure configure system identification so give it a hostname I'll call it SRX give it a domain name I'll give it chaff saying calm and provide a rule password so I'll specify the password and then we can click Next here on this page by the way there's some stuff that is optional and that's match with an Asterix so if we go back you can see these are strings so that's sorry that's mandatory if there's no Asterix then it's optional so domain name is optional here click Next again so this is optional but we could provide a default gateway for one to two turn up turn up 20.50 we can specify DNS service the default gateway IP will override the Gateway IP acquire through DHCP which is fine and there's a couple already in here for you but you can put the Google one in as well click OK click Add sorry so that's gone in there and if you device can read several different domains you can configure these as a list of domains to be searched here basically junus then uses this list to set an order in which it pens domain names when searching for the IP address of a host so you do that from here but we'll click Next and you come to the interface groups again this is optional you could have a look at the switch parts really configured for VLAN ID 3 and you could change these around so you can take interfaces out of the VLAN for example like that click Save we can so add to add further VLAN so you give it a VLAN ID you add the ports in here as well and then you've created a newbie lab with a switch port so I'll just cancel that and click Next so we've come to the configure interfaces and here you can configure your layer interfaces we've got VLAN zero we've got a physical interface here I've got another interface here so we could double click that and then you could configure this for me you can choose DHCP or leave it as IP address and you can also specify the services and the protocols that the interface will listen on and also you can specify the security zone so by default these the security zones trust on trust junus host and you can have a new suit to zone from here as well ok we'll just cancel that leave it as it is and click Next this page gives you the option to once you log in which page you will initially land on most probably the dashboard is the most common one so every other security device every other firewall I've seen it's always the - body London 1st June pavatt aren't configured by default but I look through it because the dashboard takes a while to load and the J web commit option validate every time and explicit commit in the end so you want to validate any configuration changes so I'll always go with the top option here and click Next and this is your time setting so you can configure time settings current system time reset manually configure it here you can specify a time zone here so for me it'd be Europe London which is here and optionally you can configure your NTP servers well if you want to sync with an NTP server click Next finally you can review and commit your changes so you can review it here before committing once clicking on committing it will go away and configure the device by the way the Geo web interface is not the fastest device to use most engineers will probably prefer the command-line an enterprise company is actually used centralized management systems such as NSM or Juno space security director so it's putting the changes in effects now once these are done it will let us login to the device ok let's refresh that usually give you an option just to click OK but it just timed out for some reason so the username is root and now we have to specify the password we configured in the wizard so if I specify my password login that should log me into the device again as I mentioned it's quite a slow product and it's cool to the dashboard screen so you could see the overall task for screen so system identification the system alarms the resource utilization and security resources we'll have a look at all of these options in another video thank you for watching