Initial Configuration on NFX350 Devices
Factory-Default Settings
The NFX350 device is shipped with the following factory-default settings:
Table 1: Security Policies
Source Zone | Destination Zone | Policy Action |
---|---|---|
trust | trust | permit |
trust | untrust | permit |
Table 2: Interfaces
Port Label | Interface | Security Zone | DHCP State | IP Address |
---|---|---|---|---|
0/0 to 0/7 | ge-0/0/0 to ge-0/0/7 | trust | server | 192.168.2.1/24 |
0/8 to 0/15 | xe-0/0/8 to xe-0/0/15 | untrust | client | ISP assigned |
MGMT | fxp0 | N/A | N/A | 192.168.1.1/24 |
Table 3: LTE Interfaces
Interface | Security Zone | IP Address |
---|---|---|
cl-1/1/0 | N/A | N/A |
dl0 (logical) | untrust | ISP assigned |
The NFX350 device is shipped with the following services enabled by default: DHCP, HTTPS, and TFTP.
To provide secure traffic, a basic set of screens are configured on the untrust zone.
Enabling Basic Connectivity
- Ensure that the NFX350 device is powered on.
- Connect to the console port:
- Plug one end of the Ethernet cable into the console port on your NFX350 device.
- Connect the other end of the Ethernet cable to the RJ-45—to—DB-9 serial port adapter shipped with your device.
- Connect the RJ-45—to—DB-9 serial port adapter
to the serial port on the management device. Use the following values
to configure the serial port:
Baud rate—9600; Parity—N; Data bits—8; Stop bits—1; Flow control—None.
NoteAlternately, you can use the USB cable to connect to the mini-USB console port on the device. To use the mini-USB console port, you must download the USB driver from the following page and install it on the management device:
- Use any terminal emulation program, such as HyperTerminal, to connect to the device console. The CLI displays a login prompt.
- Log in as root and enter the
password juniper123. If the software completes
booting before you connect to the console, you might need to press
the
Enter
key for the prompt to appear:NoteStarting with Junos OS Release 18.1R2 or later, the root password is not configured for initial configuration of the NFX350 devices.
login: root
password: juniper123
- Start the CLI:
root@:~ # cli
root@>
- Enter configuration mode:
root@> configure
[edit]
root@#
- Change the password for the root administration user account:
[edit]
root@# set system root-authentication plain-text-password
New password: password
Retype new password: password
- Enable SSH service for the root user:
[edit]
root@# set system services ssh root-login allow
- (Optional) Enable the Internet connection for devices
connected on LAN by setting the DNS IP:
[edit]
root@# set access address-assignment pool junosDHCPPool family inet dhcp-attributes name-server dns-server-ip
- Commit the configuration:
[edit]
root@# commit
Establishing the Connection
- Connect the device to the Internet Service Provider (ISP)
by using the following step:
Connect one of the WAN ports to the ISP. The device is assigned an IP address by the ISP through DHCP.
Figure 1: Connecting the Interfaces on an NFX350 Device Optionally, you can obtain a SIM card from the ISP and connect the device through LTE.
NoteThe LTE expansion module must be purchased separately.
- Connect the laptop to one of the front panel LAN ports. The laptop is assigned an IP address by the DHCP server running on the interface.
- Open a browser on your laptop, navigate to https://www.juniper.net, and verify your connectivity.