JUNIPER NETWORKS SRX345 Services Gateway Network Tataiso ea Mosebelisi

Qala ka Potlako

Mohato oa 1: Qala 

N KAROLO ENA
Kopana le SRX345 | 2
Kenya SRX345 ka Rack | 2
Matla | 4

Tataisong ena, re fana ka tsela e bonolo, e nang le mehato e meraro, ho u thusa ho sebetsa ka potlako ka SRX345 ea hau e ncha. Re nolofalitse le ho khutsufatsa mehato ea ho kenya le ho hlophisa, 'me re kenyelelitse le livideo tsa mokhoa oa ho etsa. U tla ithuta ho kenya SRX345 ka rack, u e fe matla, 'me u e sebelise ho netweke ea hau u sebelisa CLI.

HLOKOMELA: Re nahana hore u tla batla ho sheba Setupo sa rona se Tataisoang: Li-Firewall tsa Line tsa SRX300. Tataiso ea rona ea Tataiso e qala moo Letsatsi lena la Pele+ le fellang teng, e fana ka litaelo tsa mohato ka mohato mabapi le mokhoa oa ho boloka le ho netefatsa sebaka sa lekala la hau habonolo.

A na u thahasella ho fumana boiphihlelo ka lihlooho le ts'ebetso e fanoeng tataisong ee? Etela Juniper Networks Virtual Labs 'me u boloke sandbox ea hau ea mahala kajeno! U tla fumana sandbox ea Junes Day One Experience ka har'a sehlopha sa batho ba ikemetseng.

Kopana le SRX345
Juniper Networks® SRX345 Firewall e kopanya ka mokhoa o sireletsehileng ts'ireletso, ho tsamaisa, ho chencha, le khokahanyo ea WAN ka har'a chassis e kopanetsoeng ea 1-U. E ts'ehetsa ho fihla ho 5-Gbps firewall throughput le 800-Mbps IPsec VPN ho fihlela litlhoko tsa libaka tse mahareng, tsa likhoebo tse ajoang. Hammoho le Juniper Sky™ Enterprise le Contrail Service Orchestration® (CSO), SRX345 e fana ka SD-WAN e ikemetseng ka botlalo ho likhoebo le bafani ba litšebeletso. Karolo ea "zero-touch provisioning" (ZTP) e nolofatsa khokahano ea marang-rang ea lekala bakeng sa thomello ea pele le taolo e tsoelang pele.

SRX345 e na le likou tse robeli tsa 1 Gbe RJ-45, likou tse robeli tsa 1 Gbe SFP, boema-kepe bo le bong ba taolo, boema-kepe bo le bong ba console, le libaka tse nne tsa Mini-Physical Interface Module (Mini-PIM). Likou tsa RJ-45 le SFP li na le Makes a nang le bokhoni. Mefuta ea SRX345 AC e na le phepelo ea motlakase e le 'ngoe ea AC kapa lisebelisoa tse peli tsa motlakase tsa AC. Mefuta ea SRX345 DC e na le matla a le mong. Tataiso ena e akaretsa mefuta ea SRX345 AC.

Kenya SRX345 ka har'a Rack 

KAROLO ENA
Ho na le eng ka Lebokoseng? | 2
Ke Hloka Eng Hape? | 2
Rakela | 3

Ho na le eng ka Lebokoseng? 

• SRX345 Firewall
• Thapo ea motlakase e loketseng sebaka seo u leng ho sona
• Mohala oa USB
• Mabakete a mabeli a ntseng a eketseha
• Li-screws tse robeli tsa ho hokela li-brackets ho SRX345

Ke Hloka Eng Hape?
Hape o tla hloka:

• Motho ea ka u thusang ho kenya
• Li-screws tsa rack tse loketseng rack ea hau
• Palo ea bobeli ea Phillips (+) screwdriver
• Cable ea DB-9 ho ea ho RJ-45 kapa adaptara ea DB-9 ho ea ho RJ-45 e nang le thapo ea koporo ea CAT5E—Ha re sa kenyelletsa thapo ea DB-9 ho ea ho RJ-45 kapa adaptara ea DB-9 ho ea ho RJ-45 e nang le CAT5E. thapo ea koporo joalo ka karolo ea sephutheloana sa sesebelisoa. Haeba o hloka thapo ea console, o ka e odara ka thoko ka karolo ea nomoro ea JNP-CBL-RJ45-DB9 (adapter ea DB-9 ho ea ho RJ-45 e nang le thapo ea koporo ea CAT5E).

Raka E

Mona ke mokhoa oa ho kenya SRX345 ka rack:

1. Review Kakaretso ea Tataiso ea Tšireletso le Litemoso.
2. Koahela 'me u fase ntlha e' ngoe ea mohala o theohileng oa electrostatic discharge (ESD) ho potoloha letsoho la hao le se nang letho, 'me u hokele ntlha e 'ngoe sebakeng sa ESD.
3. Hokela masakaneng a ho fanyeha mahlakoreng a SRX345 u sebelisa li-screws tse robeli tse holimang le screwdriver. Ho ipapisitse le hore na u ka rata hore SRX345 e lule joang ka har'a raka, o ka hokela masakaneng a ka pele kapa a bohareng a masoba.
   
4. Phahamisa SRX345 'me u e behe ka har'a raka. Kenya lesoba le ka tlase ka har'a brakete e 'ngoe le e' ngoe e ntseng e hola ka lesoba seporong se seng le se seng sa rack, ho etsa bonnete ba hore SRX345 e boemong.
5. Ha u ntse u ts'oara SRX345 sebakeng, kenya motho oa bobeli 'me u tiise li-screw tsa rack ho tiisa li-brackets tse ntseng li hola. Etsa bonnete ba hore o tiisa li-screws ka masoba a mabeli a ka tlase pele, ebe u tiisa li-screw ho masoba a mabeli a ka holimo.
   
6. Etsa bonnete ba hore li-brackets tse ntseng li kenngoa ka lehlakoreng le leng la rack li lekana

Matla On
Kaha joale u kentse SRX345 ea hau ka rakeng, u se u loketse ho e hokela matla

1. Hokela leqhoele le theohang la electrostatic discharge (ESD) letsohong la hao le hlobotseng, 'me u hokele ntlha e 'ngoe ea leqhoele la ESD sebakeng sa ESD se rakeng.
2. Hokela thapo e theosang fatše, ebe u hokela ntlha e 'ngoe sebakeng sa motheo lehlakoreng la SRX345.
   
3. Hokela thapo ea matla phanele e ka morao ea SRX345.
   
4. Haeba mohloli oa motlakase oa AC o na le switch ea motlakase, e tima.
5. Hokela ntlha e 'ngoe ea thapo ea motlakase mohloling oa motlakase oa AC.
6. Haeba mohloli oa motlakase oa AC o na le switch ea motlakase, e bule.
7. Haeba u sebelisa SRX345 Firewall e nang le lisebelisoa tse peli tsa motlakase tsa AC, pheta Mohato oa 3 ho ea ho Mohato oa 5 bakeng sa phepelo ea bobeli ea motlakase. SRX345 e matlafala hang ha o e hokela matla. Ha li-LED tsa PWR le STAT phanele e ka pele li bonesitsoe botala bo tiileng, SRX345 e se e loketse ho sebelisoa.
   

Mohato oa 2: Phahamisa le ho Matha

KAROLO ENA
Likhetho tsa ho fana ka SRX345 | 6
Tlhophiso ea Pele e Sebelisa CLI | 6

Kaha joale SRX345 e se e buletsoe, ha re etseng tlhophiso ea pele ho e qala le ho sebetsa marang-rang.

HLOKOMELA: Etsa bonnete ba hore u sheba Setupo sa rona se Tataisitsoeng: SRX300 Line Firewalls. Tlhophiso ea rona ea Tataiso e qala moo Letsatsi lena la Pele+ le tlohang teng, e fana ka litaelo tsa mohato ka mohato mabapi le mokhoa oa ho boloka le ho netefatsa sebaka sa lekala la hau habonolo.

Likhetho tsa ho fana ka SRX345
Ho bonolo ho fana le ho laola SRX345 le lisebelisoa tse ling marang-rang a hau. U ka khetha sesebelisoa sa tlhophiso se u loketseng:

• Junes CLI e laela. Tataisong ena re u bonts'a mokhoa oa ho hlophisa SRX345 ka litaelo tsa CLI tse phahamisang plug le ho bapala li-fameme tsa feme.
• J-Web, Wizate ea Juniper Networks Setup e kentsoeng pele ho SRX345. Bakeng sa tlhahisoleseling mabapi le ho etsa tlhophiso ea pele u sebelisa J-Web setup wizard bona Configure SRX Devices U sebelisa J-Web Seta Wizard ho J-Web Tataiso ea mosebelisi bakeng sa lisebelisoa tsa SRX Series.
• Juniper Sky™ Enterprise, Software ea sechaba e thehiloeng marung e tsamaisoang ke Juniper Networks e le Ts'ebeletso (SaaS). U tla hloka ho ba le tšebeletso ea ngoliso ea Juniper Sky Enterprise pele u ka e sebelisa ho hlophisa SRX345. Bakeng sa tlhaiso-leseling e batsi, sheba Tataiso ea ho Qala ea Khoebo ea Juniper Sky.
• Juniper Networks Contrail Service Orchestration (CSO). Ho sebelisa CSO, o tla hloka khoutu ea netefatso. Sheba Tataiso ea Tšebeliso ea Contrail Service Orchestration (CSO).

Haeba u sebelisa Junos OS Release 19.2 kapa pejana, u ka sebelisa Juniper Networks Network Service Controller ho lokisa SRX345 ka ZTP. Network Service Controller ke karolo ea CSO. Sheba Hlophisa Sesebelisoa se Sebelisang ZTP le Juniper Networks Network Service Controller.

Tlhophiso ea Pele e Sebelisang CL

N KAROLO ENA
Hokela ho Serial Console Port | 7
Etsa Tlhophiso ea Pele | 8
Kea u babatsa! SRX ea hau e ea holimo ebile e ea sebetsa | 9

U ka sebelisa koung ea console ho SRX ho etsa tlhophiso ea pele. Karolo ena e nka hore o qala ho tsoa ho tlhophiso ea kamehla ea feme. Sheba SRX345 Firewall Hardware Guide bakeng sa lintlha tse mabapi le tlhophiso ea kamehla ea feme ea SRX345.

Kamora hore o lokise SRX345, o ka kena boema-kepeng ba LAN ba lehae, kapa o le hole ka sebopeho sa WAN, ho laola le ho lokisa SRX o sebelisa CLI kapa J-Web.

Re khothaletsa hore o sebelise sebopeho sa ge-0/0/0 bakeng sa khokahanyo ea WAN ho SRX345. Ka kamehla, sebopeho sena se hlophiselitsoe ho fumana tlhophiso ea phihlello ea Marang-rang ho tsoa ho mofani oa litšebeletso.

HLOKOMELA: Examples e nka hore u sebelisa DHCP ho lokisa sebopeho sa WAN. Haeba mofani oa WAN a sa tšehetse DHCP, o tla hloka ho itlhophisa ka bowena sehokelo sa WAN le tse ling tse amanang le static. Sheba Phetoho ea Pele ea Phuptjane.

E-ba le tlhahisoleseding ena pele u qala tlhophiso ea pele:

• Motso oa password
• Lebitso la moamoheli

Hokela ho Serial Console Port

1. Hokela pheletsong e le 'ngoe ea thapo ea Ethernet ho RJ-45 ho DB-9 serial port adapter bakeng sa SRX345 ea hau.
   HLOKOMELA: Ha re sa kenyelletsa mohala oa DB-9 ho ea ho RJ-45 kapa adapter ea DB-9 ho ea ho RJ-45 e nang le thapo ea koporo ea CAT5E e le karolo ea sephutheloana sa lisebelisoa. Haeba o hloka thapo ea khoele, o ka e odara ka thoko ka karolo ea nomoro ea JNP-CBL-RJ45-DB9 (adapter ea DB-9 ho ea ho RJ-45 e nang le thapo ea koporo ea CAT5E)
2. Hokela RJ-45 ho DB-9 serial port adaptara boema-kepeng ba serial sesebelisoa sa taolo.
3. Hokela pheletsong e 'ngoe ea thapo ea Ethernet ho koung ea serial console ho SRX345.
   
4. Qala ts'ebeliso ea hau ea ho etsisa terminal (joalo ka Microsoft Windows HyperTerminal) ebe u khetha boema-kepe bo nepahetseng ba COM ho bo sebelisa (bakeng sa ex.ample, COM1).
5. Netefatsa hore li-setting tsa serial port li behiloe ho ea kamehla:
   • Sekhahla sa Baud - 9600
   • Parity—N
   • Lintlha tsa data-8
   • Emisa likotoana - 1
   • Taolo ea phallo-ha ho letho

HLOKOMELA: Hape o ka hokela ho SRX345 o sebelisa boema-kepe ba mini-USB console. Sheba Tataiso ea Hardware ea SRX345.

Etsa Tlhophiso ea Pele 

1. Kena joalo ka mosebelisi oa metso 'me u qale CLI. Ha o hloke phasewete haeba o sebelisa feme ea kamehla.
   login: motso
   motso@%cli
   motso>
   HLOKOMELA: U ka khona view li-setting tsa kamehla tsa feme ka taelo ea mokhoa oa ho sebetsa oa tlhophiso.
2. Kenya mokhoa oa tlhophiso.
   motso> lokisa
   [edit] motso#
3. Kaha u ntse u etsa tlhophiso ea pele ka letsoho, u tla hloka ho tlosa ZTP ho tlhophiso. Sena se emisa melaetsa ea log ea nako le nako e tlalehang ka boemo ba ZTP.
   Beha phasewete ea netefatso ea motso 'me u etse phetoho ho koala ZTP. [edit] motso# hlakola ntlafatso ea setšoantšo sa chassis
   motso # hlakola sistimi ea mohala-lehae
   root# set the root-athentication plain-text-password
   Password e ncha: password
   Ngola hape phasewete e ncha: password
   Fana ka taelo ea boitlamo ho kenya tšebetsong tlhophiso ea mokhethoa e thibelang ZTP:
   [edit] motso# boitlamo
4. Numella ho kena ha metso holim'a SSH, 'me u lumelle ho fihlella SSH holim'a sebopeho sa WAN (ge-0/0/0).
   [edit] motso# seta lits'ebeletso tsa sistimi ea sash-ho kena ho lumella
   motso# seta libaka tsa ts'ireletso-sebaka sa ts'ireletso se se nang tšepo ge-0/0/0.0 host-inbound-traffic system-services sash
5. Lokisa lebitso la moamoheli.
   [edit] motso# seta lebitso la moamoheli la lebitso la moamoheli
6. Ho felile ke lehlohonolo! Tokiso ea pele e felile. Nehelana ka tlhophiso ho kenya tšebetsong liphetoho ho SRX.
   [edit] motso# boitlamo

Kea u babatsa! SRX ea hau e ea holimo ebile e ea sebetsa

Hajoale SRX345 ea hau e inthaneteng 'me e fana ka phihlello e sireletsehileng ea Marang-rang ho lisebelisoa tse hoketsoeng likoung tsa LAN. O ka tsamaisa sesebelisoa sebakeng sa heno le hole, o sebelisa Junos CLI, J-Web, kapa tšebeletso ea phano e thehiloeng marung. Mona ke hore na marang-rang a hau a shebahala joang:

Lintho tse 'maloa tseo u lokelang ho li hopola ka marang-rang a hau a macha a lekala la SRX345:

• U fihlella SRX CLI kapa J-Web sehokelo sa mosebelisi sebakeng sa heno se sebelisang aterese ea 192.168.1.1. Ho fihlella SRX u le hole, bolela aterese ea IP e fanoeng ke mofani oa WAN. Fana feela ka li-interfaces tsa show ge-0/0/0 terse CLI taelo ho netefatsa aterese e sebelisoang ke sebopeho sa WAN.
• Sebopeho sa tsamaiso se hlophisitsoe e le seva sa DHCP bakeng sa subnet ea 192.168.1.0/24.
• Lisebelisoa tse hokelletsoeng likoung tsa LAN li lokiselitsoe ho sebelisa DHCP. Ba fumana tlhophiso ea marang-rang ea bona ho tsoa ho SRX. Lisebelisoa tsena li fumana aterese ea IP ho tsoa letamong la liaterese la 192.168.2.0/24 'me li sebelisa SRX joalo ka tsela ea tsona ea kamehla.
• Likou tsohle tsa LAN li ka har'a subnet e le 'ngoe e nang le khokahanyo ea Layer 2. Sephethephethe sohle se lumelletsoe lipakeng tsa li-interfaces tsa trust zone.
• Sephethephethe sohle se tsoang sebakeng sa trust se lumelletsoe sebakeng se sa tšepahaleng. Sephethephethe sa likarabo tse tsamaellanang se lumelletsoe ho khutla ho tloha ho batho ba sa tšepahaleng ho ea sebakeng sa trust. Sephethephethe se tsoang sebakeng se sa tšepahaleng se koetsoe sebakeng sa trust.
• SRX e etsa mohloli NAT (S-NAT) e sebelisa IP ea WAN interface bakeng sa sephethephethe se rometsoeng ho WAN e tsoang sebakeng sa trust.
• Sephethephethe se amanang le lits'ebeletso tse ikhethileng tsa sistimi (HTTPS, DHCP, TFTP, le SSH) li lumelletsoe ho tloha sebakeng se sa tšepahaleng ho ea ho moamoheli oa lehae. Litšebeletso tsohle tsa sebaka sa heno le liprothokholo li lumelloa bakeng sa sephethephethe se tsoang sebakeng sa trust.

Mohato oa 3: Tsoela Pele

KAROLO ENA
Ho Latelang? | 11
Tlhahisoleseding e Akaretsang | 12
Ithute Ka Lifitio | 12

Kea u babatsa! SRX345 ea hau e hlophisitsoe 'me e loketse ho tsamaea. Mona ke lintho tse ling tseo u ka li etsang nakong e tlang.

Ho Latelang?

HLOKOMELA: Lokisa ka potlako le ho netefatsa ofisi ea lekala e sireletsehileng ka mehato e seng mekae e bonolo ka Tlhophiso ea rona e Tataisoang: Li-Firewalls tsa Line ea SRX300. Tataiso ea rona ea Tataiso e qala moo tataiso ea Letsatsi la Pele+ e fellang teng 'me e etselitsoe ho fumana sebaka sa lekala la hau inthaneteng le ho sireletseha.

Haeba u batla	Joale
Fetola litlhophiso tsa tlhophiso, etsa hore sesebelisoa se seng se sebetse, kapa ka bobeli	Kena ho J-Web ebe o sebelisa wizate. Ntle le moo, o ka sebelisa likarolo tse tsoetseng pele tsa tlhophiso tse fanoang ke Juniper Contrail Service Orchestration (CSO) le Juniper Sky Enterprise. Ho sebelisa litšebeletso tsena, o tla hloka ak'haonte le khoutu ea ho kenya tšebetsong. Hlahloba Contrail Service Orchestration (CSO) Tataiso ea ho Tsamaisa le ea Juniper Sky Enterprise Ho qala Tataiso.
Theha SRX345 ea hau ka mehato e tsoetseng pele ea ts'ireletso ho sireletsa le ho sireletsa marang-rang a hau	Etela Letsatsi la Pele: Letoto la SRX le Matha le Tšireletso e Tsoetseng Pele Litšebeletso
Laola lintlafatso tsa software ho SRX345 ea hau	Bona Ho kenya Software ho SRX Series Devices

Lintlha tse akaretsang 

Haeba u batla	Joale
Khoasolla, kenya tšebetsong, 'me u tsamaise laesense ea hau ea software ho notlolla likarolo tse ling bakeng sa SRX Firewall ea hau	Bona Kenya tšebetsong License tsa Junos OS ho Junipere Tataiso ea License
Sheba litokomane tsohle tse fumanehang bakeng sa SRX345	Etela ho Setšoantšo sa SRX345 leqepheng la Juniper TechLibrary
Lokisa SRX345 ka Junes OS CLI	Qala ka ho Letsatsi la Pele+ bakeng sa Junos OS tataisa
Lokisa SRX345 u sebelisa J-Web	Bona J-Web bakeng sa SRX Series Documentation
Lula u le morao-rao mabapi le likarolo tse ncha le tse fetotsoeng le litaba tse tsebahalang le tse rarollotsoeng.	Bona Lintlha tsa Phallo ea Junos OS

Ithute ka Lifitio

Laeborari ea rona ea livideo e ntse e hola! Re thehile livideo tse ngata, tse ngata tse bontšang mokhoa oa ho etsa ntho e 'ngoe le e' ngoe ho tloha ho kenya hardware ea hau ho lokisa likarolo tse tsoetseng pele tsa marang-rang tsa Junos OS. Mona ke lisebelisoa tse ling tse ntle tsa video le koetliso tse tla u thusa ho holisa tsebo ea hau ea Junos OS.

Haeba u batla	Joale
View a Web-e thehiloeng ho video ea koetliso e fanang ka ho fetaview ea SRX340 mme e hlalosa mokhoa oa ho e kenya le ho e hlophisa	SRX340 le SRX345 Firewalls Overview le Thomello (WBT)
Fumana malebela le litaelo tse khutšoane le tse khuts'oane tse fanang ka likarabo tse potlakileng, tse hlakileng le temohisiso mabapi le likarolo tse ikhethileng le mesebetsi ea mahlale a Juniper.	Bona Ho ithuta le junipere ho Juniper Networks leqepheng la sehlooho la YouTube
View lethathamo la lithupelo tse ngata tsa mahala tsa tekheniki tseo re fanang ka tsona ho Juniper	Etela ho Rea qala leqepheng la Juniper Learning Portal

Juniper Networks, logo ea Juniper Networks, Juniper, le Junes ke matšoao a ngolisitsoeng a Juniper Networks, Inc. linaheng tse songoang le linaheng tse ling. Matshwao a mang kaofela a kgwebo, matshwao a tshebeletso, matshwao a ngodisitsweng, kapa matshwao a tshebeletso a ngodisitsweng ke thepa ya beng ba ona ka ho fapana. Juniper Networks ha e nke boikarabello bakeng sa ho se nepahale hofe kapa hofe ho tokomane ena. Juniper Networks e na le tokelo ea ho fetola, ho fetola, ho fetisa, kapa ho ntlafatsa sengoliloeng sena ntle le tsebiso. Copyright © 2023 Juniper Networks, Inc. Litokelo tsohle li sirelelitsoe. Tsh. 09, Phato 2023.

Litokomane / Lisebelisoa

JUNIPER NETWORKS SRX345 Services Gateway Network [pdf] Bukana ea Mosebelisi SRX345 Services Gateway Network, SRX345, Services Gateway Network, Gateway Network, Network

Litšupiso

• Bukana ea Mosebelisi