close

keyboard_arrow_left

Table of Contents Expand all

play_arrow Fast Track: Initial Installation
- Fast Track to Rack Installation and Power
- Claim, Onboard, and Configure SRX4700
play_arrow Overview
play_arrow Site Planning, Preparation, and Specifications
play_arrow Initial Installation and Configuration
play_arrow Maintain Components
play_arrow Troubleshoot Hardware
- Troubleshoot the SRX4700
play_arrow Contact Customer Support and Return the Chassis or Components
- Return an SRX4700 Chassis or a Component
play_arrow Safety and Compliance Information

list Table of Contents

English

Configure the SRX4700 Using J-Web
Configure the SRX4700 using Juniper® Security Director Cloud
Configure the SRX4700 using Secure ZTP
Access the CLI on the SRX4700
Configure Root Authentication and the Management Interface from the CLI
Factory-Default Configuration of the SRX4700
View the Factory-Default Configuration of the SRX4700

keyboard_arrow_right

Configure Junos OS on the SRX4700

date_range 31-Mar-25

arrow_backward

arrow_forward

We ship the SRX4700 Firewall with preinstalled Junos OS, which is ready to be configured when you power on the device. You can use the J-Web GUI, Juniper® Security Director (on-prem), Juniper® Security Director Cloud, Secure ZTP, or CLI to perform the initial configuration.

Configure the SRX4700 Using J-Web

The J-Web interface is a Web-based graphical interface that allows you to operate a firewall without commands.

Follow the instructions in Access the J-Web User Interface to how to start and access the J-Web user interface and The J-Web Setup Wizard to configure your device.

Configure the SRX4700 using Juniper® Security Director Cloud

Juniper® Security Director Cloud is a cloud-based software-as-a-solution (SaaS) portal that helps you securely migrate your network to a Secure Access Service Edge (SASE) architecture.

Follow the instructions in the Juniper Security Director Cloud Quick Start guide to configure your device.

Configure the SRX4700 using Secure ZTP

Secure ZTP is highly automated, you can conveniently and securely set up and configure your device in your network with little manual work.

Follow the instructions in the Secure ZTP guide to configure your device.

Access the CLI on the SRX4700

To access the CLI on your device:

Connect the management device to the serial console port as described in Connect the SRX4700 to a Management Console Using an RJ-45 Connector.
Start your asynchronous terminal emulation application (such as Microsoft Windows HyperTerminal), and select the appropriate COM port to use (for example, COM1).
Configure the serial port settings with the following values:
- Baud rate—9600
- Parity—N
- Data bits—8
- Stop bits—1
- Flow control—none
Power on the device. You can start performing initial software configuration on the device after the device is up.

Note:
After you have completed the initial configuration, you can connect your device to a network for out-of-band management as described in Connect the SRX4700 to a Network for Out-of-Band Management.

Configure Root Authentication and the Management Interface from the CLI

You must perform the initial configuration of the device through the console port.

Gather the following information before configuring the device:

Root authentication
IP address of the management interface
Default route

To configure root authentication and the management interface:

Log in as the root user. There is no password.
Start the CLI and enter configuration mode.
```
root@% cli
root@>configure
root@#
```
Set the root authentication password. You can enter a cleartext password, an encrypted password, or an SSH public key string (DSA or RSA).
```
[edit]
root@# set system root-authentication plain-text-password
New password: password
Retype new password: password
```
Commit the configuration to activate it on the device.
```
[edit]
root@# commit
```
Configure the IP address and prefix length for the Ethernet management interface on the device.
```
[edit]
root@# set interfaces fxp0 unit 0 family inet address address/prefix-length
```

Configure the default route.

content_copy zoom_out_map
[edit]
root@# set routing-options static route 0.0.0.0/0 next-hop gateway

Enable Web access to launch J-Web.
```
[edit]
root@# set system services web-management http
```
Commit the configuration changes.
```
[edit]
root@# commit
```

Factory-Default Configuration of the SRX4700

Your firewall comes configured with a factory-default configuration. The default configuration includes the following security configuration:

Two security zones are created: trust and untrust.
A security policy is created that permits outbound traffic from the trust zone to the untrust zone.
Source Network Address Translation (NAT) is configured on the trust zone.

If the current active configuration fails, you can use the load factory-default command to revert to the factory-default configuration.

View the Factory-Default Configuration of the SRX4700

To view the factory-default configuration of the firewall using the CLI:

Log in as the root user and provide your credentials.
View the list of default configuration files:
```
root@srx4700>file list /etc/config
```
View the required default configuration file.
```
root@srx4700>file show /etc/config/config-file-name
```

arrow_backward PREVIOUS Connect SRX4700 to Power

NEXT arrow_forward Routine Maintenance Procedures for the SRX4700 Firewall

SRX4700 Firewall Hardware Guide

ON THIS PAGE