Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

Initial Configuration on NFX350 Devices

date_range 21-May-24

Factory Default Settings

The NFX350 is shipped with the following factory default settings:

Table 1: Security Policies

Source Zone

Destination Zone

Policy Action

trust

trust

permit

trust

untrust

permit

Table 2: Interfaces

Port Label

Interface

Security Zone

DHCP State

IP Address

0/0 to 0/7

ge-0/0/0 to ge-0/0/7

trust

server

192.168.2.1/24

0/8 to 0/15

xe-0/0/8 to xe-0/0/15

trust

client

ISP assigned

MGMT

fxp0

N/A

N/A

192.168.1.1/24

The device is shipped with the following services enabled in the default security policy: DHCP, HTTP, HTTPS, and SSH.

To provide secure traffic, a basic set of screens are configured on the untrust zone.

Enabling Basic Connectivity

  1. Ensure that the device is powered on.
  2. Connect to the console port:
    1. Plug one end of the Ethernet cable into the console port on your device.
    2. Connect the other end of the Ethernet cable to the RJ-45 to DB-9 serial port adapter.
    3. Connect the RJ-45 to DB-9 serial port adapter to the serial port on the management device. Use the following values to configure the serial port:

      Bits per second—9600; Parity—None; Data bits—8; Stop bits—1; Flow control—None.

    Note:

    We no longer include the console cable as part of the device package. If the console cable and adapter are not included in your device package, or if you need a different type of adapter, you can order the following separately:

    • RJ-45 to DB-9 adapter (JNP-CBL-RJ45-DB9)

    • RJ-45 to USB-A adapter (JNP-CBL-RJ45-USBA)

    • RJ-45 to USB-C adapter (JNP-CBL-RJ45-USBC)

    If you want to use an RJ-45 to USB-A or RJ-45 to USB-C adapter, you must have the X64 (64-Bit) Virtual COM port (VCP) driver installed on your PC. See https://ftdichip.com/drivers/vcp-drivers/ to download the driver.

    Note:

    Alternately, you can use the USB cable to connect to the mini-USB console port on the device. To use the mini-USB console port, you must download the USB driver from the following page and install the driver on the management device:

    https://www.juniper.net/support/downloads/junos.html

  3. Use any terminal emulation program such as HyperTerminal to connect to the device console. The CLI displays a login prompt.
  4. Log in as root. If the software completes booting before you connect to the console, you might need to press the Enter key for the prompt to appear.
    content_copy zoom_out_map
    login: root
  5. Start the CLI.
    content_copy zoom_out_map
    root@:~ # cli
    root@>
  6. Enter configuration mode.
    content_copy zoom_out_map
    root@> configure
    [edit]
    root@# 
  7. Change the password for the root administration user account.
    content_copy zoom_out_map
    [edit]
    root@# set system root-authentication plain-text-password
    New password: password
    Retype new password: password
  8. Enable SSH service for the root user.
    content_copy zoom_out_map
    [edit]
    root@# set system services ssh root-login allow
  9. (Optional) Enable Internet connection for the devices connected on LAN by setting the DNS IP.
    content_copy zoom_out_map
    [edit]
    root@# set access address-assignment pool junosDHCPPool family inet dhcp-attributes name-server dns-server-ip 
  10. Commit the configuration.
    content_copy zoom_out_map
    [edit]
    root@# commit

Establishing the Connection

  1. Connect the device to the ISP by connecting one of the WAN ports (0/8 and 0/15) to the ISP. The device is assigned an IP address by the ISP through DHCP.
    Note:

    For information about NFX350 interfaces, see Table 2.

  2. Connect the laptop to one of the front panel LAN ports (0/0 to 0/7). The laptop is assigned an IP address by the DHCP server running on the device.
  3. Open a browser window on your laptop, navigate to https://www.juniper.net, and verify your connectivity.
footer-navigation