Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Initial Configuration on NFX250 NextGen Devices

Factory Default Settings

The NFX250 NextGen is shipped with the following factory default settings:

Table 1: Security Policies

Source Zone

Destination Zone

Policy Action

trust

trust

permit

trust

untrust

permit

The following table lists the ports in the trust and untrust zones for a device with factory-default configuration.

Table 2: Interfaces

Port Label

Interface

Security Zone

DHCP State

IP Address

0/1 to 0/11

ge-0/0/1 to ge-0/0/11

trust

server

192.168.2.1/24

0/12 to 0/13

xe-0/0/12 to xe-0/0/13

untrust

client

ISP assigned

MGMT

fxp0

N/A

N/A

192.168.1.1/24

The device is shipped with the following services enabled in the default security policy: DHCP, HTTP, HTTPS, and SSH.

To provide secure traffic, a basic set of screens are configured on the untrust zone.

Enabling Basic Connectivity

  1. Ensure that the device is powered on.
  2. Connect to the console port:
    1. Plug one end of the Ethernet cable into the console port on your device.
    2. Connect the other end of the Ethernet cable to the RJ-45 to DB-9 serial port adapter shipped with your device.
    3. Connect the RJ-45 to DB-9 serial port adapter to the serial port on the management device. Use the following values to configure the serial port:

      Bits per second—9600; Parity—None; Data bits—8; Stop bits—1; Flow control—None.

    Note:

    Alternately, you can use the USB cable to connect to the mini-USB console port on the device. To use the mini-USB console port, you must download the USB driver from the following page and install the driver on the management device:

    https://www.juniper.net/support/downloads/junos.html

  3. Use any terminal emulation program such as HyperTerminal to connect to the device console. The CLI displays a login prompt.
  4. Log in as root. If the software completes booting before you connect to the console, you might need to press the Enter key for the prompt to appear.
  5. Start the CLI.
  6. Enter configuration mode.
  7. Change the password for the root administration user account.
  8. Enable SSH service for the root user.
  9. (Optional) Enable Internet connection for the devices connected on LAN by setting the DNS IP.
  10. Commit the configuration.

Establishing the Connection

  1. Connect the device to the ISP by connecting one of the WAN ports (0/12 and 0/13) to the ISP. The device is assigned an IP address by the ISP through DHCP.
    Note:

    For information about NFX250 (NG) interfaces, see Table 2.

  2. Connect the laptop to one of the front panel LAN ports (0/0 to 0/11). The laptop is assigned an IP address by the DHCP server running on the device.
  3. Open a browser window on your laptop, navigate to https://www.juniper.net, and verify your connectivity.