Rate and give feedback:  Feedback Received. Thank You!

Rate and give feedback: 

X

This document helped resolve my issue

Yes No

Additional Comments

800 characters remaining

May we contact you if necessary?

Name:  

E-mail: 

Enter a valid Email ID

Need product assistance? Contact Juniper Support

Submit

This site is protected by hCaptcha and its Privacy Policy and Terms of Service apply.

English  

English

Firefly Perimeter Configuration Using the CLI Interface

1. Verify that the device is powered on.
2. Log in as the root user. There is no password.
3. Start the CLI
   root#cliroot@>
4. Enter configuration mode.
   configure [edit]root@#
5. Set the root authentication password by entering a cleartext password, an encrypted password, or an SSH public key string (DSA or RSA).
   [edit]root@# set system root-authentication plain-text-passwordNew password: password Retype new password: password
6. Configure an administrative account on the device.
   [edit]root@# set system login user admin class super-user authentication plain-text-password
7. Commit the configuration to activate it on the device.
   [edit]root@# commit
8. Login as the administrative user you configured in Step 6.
9. Configure the host name.
   configure [edit]admin@# set system host-name host-name
10. Configure the traffic interface.
    [edit]admin@# set interfaces ge-0/0/1 unit 0 family inet address address/prefix-length
11. Configure the default route.
    [edit]admin@# set routing-options static route 0.0.0.0/0 next-hop gateway
12. Configure basic security zones and bind them to traffic interfaces.
    [edit]admin@# set security zones security-zone untrust interfaces ge-0/0/1
13. Verify the configuration.
    [edit]admin@# commit checkconfiguration check succeeds
14. Commit the configuration to activate it on the device.
    [edit]admin@# commitcommit complete
15. Optionally, display the configuration to verify that it is correct.
    [edit]user@host# show

    system {host-name devicea;domain-name lab.device.net;domain-search [ lab.device.net device.net ];time-zone America/Los_Angeles;root-authentication {ssh-rsa "ssh-rsa AAAAB3Nza...D9Y2gXF9ac==root@devicea.lab.device.net";}

    name-server {ip}

    services {}

    ntp { server ip }}

    interfaces {ge-0/0/0 {unit 0 {family inet {address ip}}}

    lo0 {unit 0 {family inet {address ip}}}}
16. Commit the configuration to activate it on the device.
    [edit]admin@# commit
17. Optionally, configure more properties by adding the necessary configuration statements. Then commit the changes to activate them on the device.
    [edit]admin@host# commit
18. When you have finished configuring the device, exit configuration mode.
    [edit]admin@host# exitadmin@host>

Note: For additional configuration details, see: https://www.juniper.net/techpubs/en_US/junos12.1/information-products/ pathway-pages/security/security-swconfig-initial-device-config.html#configuration