Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Announcement: Try the Ask AI chatbot for answers to your technical questions about Juniper products and solutions.

close
header-navigation
keyboard_arrow_up
{ "lCode": "en_US", "lName": "English", "folder": "en_US" }
English

Initial Configuration on NFX350 Devices

date_range 23-Mar-20

Factory-Default Settings

The NFX350 device is shipped with the following factory-default settings:

Table 1: Security Policies

Source Zone

Destination Zone

Policy Action

trust

trust

permit

trust

untrust

permit

Table 2: Interfaces

Port Label

Interface

Security Zone

DHCP State

IP Address

0/0 to 0/7

ge-0/0/0 to ge-0/0/7

trust

server

192.168.2.1/24

0/8 to 0/15

xe-0/0/8 to xe-0/0/15

untrust

client

ISP assigned

MGMT

fxp0

N/A

N/A

192.168.1.1/24

Table 3: LTE Interfaces

Interface

Security Zone

IP Address

cl-1/1/0

N/A

N/A

dl0 (logical)

untrust

ISP assigned

The NFX350 device is shipped with the following services enabled by default: DHCP, HTTPS, and TFTP.

To provide secure traffic, a basic set of screens are configured on the untrust zone.

Enabling Basic Connectivity

  1. Ensure that the NFX350 device is powered on.
  2. Connect to the console port:
    1. Plug one end of the Ethernet cable into the console port on your NFX350 device.
    2. Connect the other end of the Ethernet cable to the RJ-45—to—DB-9 serial port adapter shipped with your device.
    3. Connect the RJ-45—to—DB-9 serial port adapter to the serial port on the management device. Use the following values to configure the serial port:

      Baud rate—9600; Parity—N; Data bits—8; Stop bits—1; Flow control—None.

    Note

    Alternately, you can use the USB cable to connect to the mini-USB console port on the device. To use the mini-USB console port, you must download the USB driver from the following page and install it on the management device:

    https://www.juniper.net/support/downloads/junos.html

  3. Use any terminal emulation program, such as HyperTerminal, to connect to the device console. The CLI displays a login prompt.
  4. Log in as root and enter the password juniper123. If the software completes booting before you connect to the console, you might need to press the Enter key for the prompt to appear:
    Note

    Starting with Junos OS Release 18.1R2 or later, the root password is not configured for initial configuration of the NFX350 devices.

    login: root
    password: juniper123
  5. Start the CLI:
    root@:~ # cli
    root@>
  6. Enter configuration mode:
    root@> configure
    [edit]
    root@#
  7. Change the password for the root administration user account:
    [edit]
    root@# set system root-authentication plain-text-password
    New password: password
    Retype new password: password
  8. Enable SSH service for the root user:
    [edit]
    root@# set system services ssh root-login allow
  9. (Optional) Enable the Internet connection for devices connected on LAN by setting the DNS IP:
    [edit]
    root@# set access address-assignment pool junosDHCPPool family inet dhcp-attributes name-server dns-server-ip
  10. Commit the configuration:
    [edit]
    root@# commit

Establishing the Connection

  1. Connect the device to the Internet Service Provider (ISP) by using the following step:
    Note

    For information on interface mapping, see Table 2 and Table 3.

    Connect one of the WAN ports to the ISP. The device is assigned an IP address by the ISP through DHCP.

    Figure 1: Connecting the Interfaces on an NFX350 Device
    Connecting the Interfaces
on an NFX350 Device

    Optionally, you can obtain a SIM card from the ISP and connect the device through LTE.

    Note

    The LTE expansion module must be purchased separately.

  2. Connect the laptop to one of the front panel LAN ports. The laptop is assigned an IP address by the DHCP server running on the interface.
  3. Open a browser on your laptop, navigate to https://www.juniper.net, and verify your connectivity.
footer-navigation