Juniper Networks SSG 20 manual About This Guide

Page 5

About This Guide

The Juniper Networks Secure Services Gateway (SSG) 20 device is an integrated router and firewall platform that provides Internet Protocol Security (IPSec) virtual private network (VPN) and firewall services for a branch office or a retail outlet.

Juniper Networks offers two models of the SSG 20 device:

SSG 20, which supports auxiliary (AUX) connectivity

SSG 20-WLAN, which supports integrated 802.11a/b/g wireless standards

Both SSG 20 devices support universal serial bus (USB) storage and two mini physical interface module (PIM) slots that can hold any of the mini PIMs. The devices also provide protocol conversions between local area networks (LANs) and wide area networks (WANs).

NOTE: The configuration instructions and examples in this document are based on the functionality of a device running ScreenOS 5.4. Your device might function differently depending on the ScreenOS version you are running. For the latest device documentation, refer to the Juniper Networks Technical Publications website at http://www.juniper.net/techpubs/hardware. To see which ScreenOS versions are currently available for your device, refer to the Juniper Networks Support website at http://www.juniper.net/customers/support/.

5

Image 5

Contents SSG 20 Hardware Installation and Configuration Guide Copyright Notice Table of Contents Appendix B Initial Configuration Wizard About This Guide WebUI Conventions OrganizationCLI Conventions Navigational Path and Configuration SettingsObtaining Documentation and Technical Support Hardware Overview Port and Power Connectors Status LED Descriptions Name Color Front PanelSystem Status LEDs Name Color Status Description LAN Port LEDs Name Color Status Description Port DescriptionsLink TX/RXMini PIMs for the SSG Mini Physical Interface Module Port DescriptionsMini PIM LED States on the SSG Type Name Color Description Radio Transceivers Power AdapterBack Panel Grounding Lug USB Port Antennae TypesInstalling and Connecting the Device Before You Begin Installing EquipmentSSG 20 Front-mount Connecting the Power Connecting Interface Cables to a DeviceConnecting a Device to an Untrusted Network Connecting a Device to a NetworkSerial AUX/Console Ports Connecting Mini PIMs to an Untrusted NetworkMicrofilter and Splitter on Your Network Connection Connecting a Device to an Internal Network or a WorkstationWireless Antennae Configuring the Device Using a Console Connection Accessing a DeviceUsing the WebUI WebUI Login Prompt Using TelnetDMZ Default Device SettingsDefault Physical Interface to Zone Bindings Port Label Interface Zone Wireless and Logical Interface BindingsRoot Admin Name and Password Basic Device ConfigurationBridge Group Interfaces Date and TimeManagement Services Administrative AccessManagement Interface Address Default RouteHostname and Domain Name Basic Wireless Configuration Backup Untrust Interface ConfigurationDefault SSG 20-WLAN Configuration WPA-PSK Wireless Authentication and Encryption OptionsWPA WPA2-PSKActivate wireless changes ADSL2/2+ Interface Mini PIM ConfigurationVirtual Circuits PPPoE or PPPoA Static IP Address and Netmask T1 Interface Isdn InterfaceE1 Interface Modem Interface Verifying External Connectivity Basic Firewall ProtectionsResetting a Device to Factory Defaults Page Replacing a Mini-Physical Interface Module Servicing the DeviceRequired Tools and Parts Removing a Mini PIM Removing a Blank FaceplateRemoving a Mini PIM Installing a Mini PIMBottom of Device Upgrading MemoryUnlocking the Memory Module 56 „ Upgrading Memory Specifications Environmental Tolerance PhysicalElectrical Certifications SafetyEMC Emissions EMC ImmunityRJ-45 Connector Pinouts Name Description ConnectorsGND DSRDCD DB-9 Connector Pinouts Name DescriptionDTR RTSPage Initial Configuration Wizard Rapid Deployment Window Administrator Login WindowPhysical Interface Window Wlan Access Point WindowADSL2/2+ Interface Window Adsl Interface Configuration WindowVPI/VCI Fields in Adsl Interface Configuration Window DescriptionT1 Physical Layer Tab Window T1 Interface WindowsFields in T1 Physical Layer Tab Window Description 70 „ Page Cisco Hdlc Option with Cisco Hdlc Tab Window E1 Physical Layer Tab Window E1 Interface WindowsFields in E1 Physical Layer Tab Window Description Field Description Isdn Interface WindowsSPID2 Fields in Isdn Physical Layer Tab Window DescriptionSPID1 Page Eth0/0 Interface Untrust Zone Window 92 Modem Interface WindowEth0/1 Interface DMZ Zone Window Bgroup0 Interface Window Bgroup0 Interface Trust Zone WindowFields in Bgroup0 Interface Window Description Wireless0/0 Interface Trust Zone WindowSsid Fields in Wireless0/0 Interface Window DescriptionInterface Summary Window Physical Ethernet Dhcp Interface Window Wireless Dhcp Interface WindowConfirmation Window Confirmation WindowAdsl IndexVPI/VCI