• Connecting to the SRX345 Services Gateway from the CLI Remotely on page 77
• Configuring the SRX345 Services Gateway Using the CLI on page 78
Understanding SRX345 Services Gateway Factory-Default Settings
Your services gateway comes configured with a factory-default configuration. The default
configuration includes the following security configuration:
•
Two security zones are created: trust and untrust.
•
Interfaces ge-0/0/0 and ge-0/0/15 are in the untrust zone, while interfaces ge-0/0/1
through ge-0/0/14 are in the trust zone.
•
A security policy is created that permits outbound traffic from the trust zone to the
untrust zone.
•
Source Network Address Translation (NAT) is configured on the trust zone.
If the current active configuration fails, you can use the load factory-default command
to revert to the factory-default configuration.
Table 19 on page 68 lists the default interface configuration.
Table 19: Default Interface Configuration for the SRX345 Services Gateway
IP AddressDHCP StateSecurity ZoneInterfacePort Label
Dynamically assignedClientuntrustge-0/0/0 and ge-0/0/150/0 and 0/15
192.168.2.1/24ServertrustVLAN Interface irb.0 (ge-0/0/1
to ge-0/0/14)
0/1 to 0/14
192.168.1.1/24Serverfxp0MGMT
cl-1/0/0
ISP assigned*untrustdl0
* Only if the LTE Mini-PIM is present.
Related
Documentation
SRX345 Services Gateway Software Configuration Overview on page 67•
• Viewing SRX345 Services Gateway Factory-Default Settings on page 69
• Accessing J-Web on the SRX345 Services Gateway on page 71
• Configuring the SRX345 Services Gateway Using the J-Web Setup Wizard on page 72
• Accessing the CLI on the SRX345 Services Gateway on page 76
• Connecting to the SRX345 Services Gateway from the CLI Remotely on page 77
• Configuring the SRX345 Services Gateway Using the CLI on page 78
Copyright © 2017, Juniper Networks, Inc.68
SRX345 Services Gateway Hardware Guide