Juniper Networks Essential Configuration Guide for SSG 20 Devices

Page 27

Chapter 3

Configuring the Device

ScreenOS software is preinstalled on an SSG 20 device. When the device is powered on, it is ready to be configured. While the device has a default factory configuration that allows you to initially connect to the device, you need to perform further configuration for your specific network requirements.

This chapter contains the following sections:

“Accessing a Device” on page 28

“Default Device Settings” on page 31

“Basic Device Configuration” on page 33

“Basic Wireless Configuration” on page 37

“Mini PIM Configuration” on page 41

“Basic Firewall Protections” on page 48

“Verifying External Connectivity” on page 48

“Resetting a Device to Factory Defaults” on page 49

NOTE: After you configure a device and verify connectivity through the remote network, you must register your product at www.juniper.net/support/ so certain ScreenOS services, such as Deep Inspection Signature Service and Antivirus (purchased separately), can be activated on the device. After registering your product, use the WebUI to obtain the subscription for the service. For more information about registering your product and obtaining subscriptions for specific services, refer to the Fundamentals volume of the Concepts & Examples ScreenOS Reference Guide for the ScreenOS version running on the device.

27

Image 27

Contents SSG 20 Hardware Installation and Configuration Guide Copyright Notice Table of Contents Appendix B Initial Configuration Wizard About This Guide WebUI Conventions OrganizationCLI Conventions Navigational Path and Configuration SettingsObtaining Documentation and Technical Support Hardware Overview Port and Power Connectors Front Panel System Status LEDsStatus LED Descriptions Name Color Name Color Status Description TX/RX Port DescriptionsLAN Port LEDs Name Color Status Description LinkMini PIMs for the SSG Mini Physical Interface Module Port DescriptionsMini PIM LED States on the SSG Type Name Color Description Power Adapter Back PanelRadio Transceivers Grounding Lug USB Port Antennae TypesInstalling and Connecting the Device Before You Begin Installing EquipmentSSG 20 Front-mount Connecting the Power Connecting Interface Cables to a DeviceConnecting a Device to an Untrusted Network Connecting a Device to a NetworkSerial AUX/Console Ports Connecting Mini PIMs to an Untrusted NetworkMicrofilter and Splitter on Your Network Connection Connecting a Device to an Internal Network or a WorkstationWireless Antennae Configuring the Device Using a Console Connection Accessing a DeviceUsing the WebUI WebUI Login Prompt Using TelnetDefault Device Settings Default Physical Interface to Zone Bindings Port LabelDMZ Interface Zone Wireless and Logical Interface BindingsRoot Admin Name and Password Basic Device ConfigurationBridge Group Interfaces Date and TimeManagement Services Administrative AccessDefault Route Hostname and Domain NameManagement Interface Address Basic Wireless Configuration Backup Untrust Interface ConfigurationDefault SSG 20-WLAN Configuration WPA2-PSK Wireless Authentication and Encryption OptionsWPA-PSK WPAActivate wireless changes ADSL2/2+ Interface Mini PIM ConfigurationVirtual Circuits PPPoE or PPPoA Static IP Address and Netmask T1 Interface Isdn InterfaceE1 Interface Modem Interface Verifying External Connectivity Basic Firewall ProtectionsResetting a Device to Factory Defaults Page Servicing the Device Required Tools and PartsReplacing a Mini-Physical Interface Module Removing a Mini PIM Removing a Blank FaceplateRemoving a Mini PIM Installing a Mini PIMBottom of Device Upgrading MemoryUnlocking the Memory Module 56 „ Upgrading Memory Specifications Physical ElectricalEnvironmental Tolerance EMC Immunity SafetyCertifications EMC EmissionsDSR ConnectorsRJ-45 Connector Pinouts Name Description GNDRTS DB-9 Connector Pinouts Name DescriptionDCD DTRPage Initial Configuration Wizard Rapid Deployment Window Administrator Login WindowPhysical Interface Window Wlan Access Point WindowADSL2/2+ Interface Window Adsl Interface Configuration WindowVPI/VCI Fields in Adsl Interface Configuration Window DescriptionT1 Physical Layer Tab Window T1 Interface WindowsFields in T1 Physical Layer Tab Window Description 70 „ Page Cisco Hdlc Option with Cisco Hdlc Tab Window E1 Physical Layer Tab Window E1 Interface WindowsFields in E1 Physical Layer Tab Window Description Field Description Isdn Interface WindowsFields in Isdn Physical Layer Tab Window Description SPID1SPID2 Page Eth0/0 Interface Untrust Zone Window 92 Modem Interface WindowEth0/1 Interface DMZ Zone Window Bgroup0 Interface Window Bgroup0 Interface Trust Zone WindowFields in Bgroup0 Interface Window Description Wireless0/0 Interface Trust Zone WindowFields in Wireless0/0 Interface Window Description Interface Summary WindowSsid Physical Ethernet Dhcp Interface Window Wireless Dhcp Interface WindowConfirmation Window Confirmation WindowAdsl IndexVPI/VCI