Juniper Networks SSG 20 About This Guide

5

About This Guide

The Juniper Networks Secure Services Gateway (SSG) 20 device is an integrated

router and firewall platform that provides Internet Protocol Security (IPSec) virtual

private network (VPN) and firewall services for a branch office or a retail outlet.

Juniper Networks offers two models of the SSG 20 device:

SSG 20, which supports auxiliary (AUX) connectivity

SSG 20-WLAN, which supports integrated 802.11a/b/g wireless standards

Both SSG 20 devices support universal serial bus (USB) storage and two mini

physical interface module (PIM) slots that can hold any of the mini PIMs. The

devices also provide protocol conversions between local area networks (LANs) and

wide area networks (WANs).

NOTE: The configuration instructions and examples in this document are based on the

functionality of a device running ScreenOS 5.4. Your device might function

differently depending on the ScreenOS version you are running. For the latest

device documentation, refer to the Juniper Networks Technical Publications

website at http://www.juniper.net/techpubs/hardware. To see which ScreenOS

versions are currently available for your device, refer to the Juniper Networks

Support website at http://www.juniper.net/customers/support/.

Contents

Main Copyright Notice FCC Statement Disclaimer Table of Contents Page About This Guide Organization WebUI Conventions CLI Conventions Obtaining Documentation and Technical Support Chapter 1 Hardware Overview 10 Port and Power Connectors Table 1: SSG 20 Ports and Power Connectors Figure 2: Built-in Port and Mini-PIM Location Port Description Connector Speed/Protocol Front Panel System Status LEDs 12 Name Color Status Description Port Descriptions Console Port AUX Port Mini Physical Interface Module Port Descriptions Table 4: Mini PIM LED States on the SSG 20 Type Name Color State Description panel slots before powering on the device. CAUTION: Mini PIMs are not hot-swappable. You must install them in the front Back Panel Power Adapter Radio Transceivers Page Antennae Types USB Port Chapter 2 Installing and Connecting the Device Before You Begin Installing Equipment Page Connecting Interface Cables to a Device Connecting the Power Connecting a Device to a Network Connecting a Device to an Untrusted Network Serial (AUX/Console) Ports Connecting Mini PIMs to an Untrusted Network ADSL2/2+ Mini PIM ISDN, T1, E1, and V.92 Mini PIMs Connecting a Device to an Internal Network or a Workstation Wireless Antennae Chapter 3 Configuring the Device Accessing a Device Using a Console Connection Using the WebUI Using Telnet Default Device Settings Page Basic Device Configuration Root Admin Name and Password Date and Time Bridge Group Interfaces Administrative Access Management Services Hostname and Domain Name Default Route Management Interface Address Backup Untrust Interface Configuration Basic Wireless Configuration Page Page Page Mini PIM Configuration ADSL2/2+ Interface Virtual Circuits VPI/VCI and Multiplexing Method PPPoE or PPPoA Static IP Address and Netmask ISDN Interface T1 Interface E1 Interface V.92 Modem Interface Basic Firewall Protections Verifying External Connectivity Resetting a Device to Factory Defaults Page Chapter 4 Servicing the Device Required Tools and Parts Replacing a Mini-Physical Interface Module Removing a Blank Faceplate Removing a Mini PIM Installing a Mini PIM Upgrading Memory Page Page Appendix A Specifications 58 Physical Electrical Environmental Tolerance Certifications Safety EMC Emissions EMC Immunity ETSI T1 Interface Connectors Figure 23 shows the location of the pins on the DB-9 female connector. Table12 provides the DB-9 connector pinouts. Page Appendix B Initial Configuration Wizard 1. Rapid Deployment Window 2. Administrator Login Window 3. WLAN Access Point Window 4. Physical Interface Window 5. ADSL2/2+ Interface Window Table 13: Fields in ADSL Interface Configuration Window 6. T1 Interface Windows Table 14: Fields in T1 Physical Layer Tab Window Figure 30: T1 Frame Relay Tab Window Table 15: Fields in T1 Frame Relay Tab Window Page Page 7. E1 Interface Windows Table 19: Fields in E1 Physical Layer Tab Window Figure 35: E1 Frame Relay Tab Window Table 20: Fields in E1 Frame Relay Tab Window 8. ISDN Interface Windows Table 21: Fields in ISDN Physical Layer Tab Window Figure 37: ISDN Connection Tab Window Table 22: Fields in ISDN Connection Tab Window 9. V.92 Modem Interface Window Figure 38: Modem Interface Window Table 23: Fields in Modem Interface Window 10. Eth0/0 Interface (Untrust Zone) Window The eth0/0 interface can have a static or a dynamic IP address assigned via DHCP or PPPoE. 11. Eth0/1 Interface (DMZ Zone) Window The eth0/1 interface can have a static or a dynamic IP address assigned via DHCP. 12. Bgroup0 Interface (Trust Zone) Window 13. Wireless0/0 Interface (Trust Zone) Window Table 27: Fields in Wireless0/0 Interface Window 14. Interface Summary Window After you have configured the WAN interfaces, you will see the Interface Summary window. Figure 43: Interface Summary Window Page 17. Confirmation Window Index A B C D S U V W