I-SRX320 Ukuqala Okusheshayo
Ishicilelwe
2023-10-29
KHULULA

Isinyathelo 1: Qala

Kulo mhlahlandlela, sinikeza indlela elula, enezinyathelo ezintathu, ukuze usheshe usebenze nge-SRX320 yakho entsha. Senze kwaba lula futhi safinyeza izinyathelo zokufaka nokumisa, futhi safaka namavidiyo enziwa kanjani. Uzofunda ukuthi uyifaka kanjani i-SRX320 endaweni yokubeka, uyinike amandla, futhi uyihambise kunethiwekhi yakho usebenzisa i-CLI.
QAPHELA: Sicabanga ukuthi uzofuna ukuhlola yethu Ukusethwa Okuqondisiwe: I-SRX300 Line Firewalls. Ukusethwa Kwethu Okuqondisiwe kuqala lapho lolu suku Lokuqala+ luphela khona, lunikeza imiyalelo yesinyathelo nesinyathelo yokuthi ungayivikela kanjani kalula futhi uqinisekise indawo yegatsha lakho.
Ingabe unentshisekelo yokuthola ulwazi oluthe xaxa ngezihloko nokusebenza okukhulunywa ngakho kulo mhlahlandlela? Vakashela Juniper Networks Virtual Labs futhi ugcine i-sandbox yakho yamahhala namuhla! Uzothola i-Junos Day One Experience sandbox esigabeni sokubonisa sokuma sodwa.
Hlangana ne-SRX320
I-Juniper Networks® SRX320 Firewall inikeza ukuvikeleka kwesizukulwane esilandelayo, umzila, ukushintsha, nokuxhumeka kwe-WAN kudivayisi encane yedeskithophu. I-SRX320 inamachweba ayisishiyagalombili e-1GbE, okuhlanganisa namachweba enethiwekhi ayisithupha e-RJ-45 kanye namachweba amabili amancane we-form-factor pluggable (SFP) transceiver. Izimbobo ze-SFP ziyakwazi i-MACsec.

Faka i-SRX320 kuRakhi

Ungakwazi ukufaka i-SRX320 etafuleni noma edeskini, odongeni, noma endaweni yokubeka. Sikubonisa ukuthi ungayifaka kanjani ku-rack.
Yini eseBhokisini?

• I-Firewall ye-SRX320
• Intambo yamandla efanele indawo okuyo
• Ikhebula le-USB

Yini Okunye Engiyidingayo?
Ikhebula le-DB-9 kuye ku-RJ-45 noma i-adaptha engu-DB-9 kuye ku-RJ-45 enentambo yethusi ye-CAT5E—Asisafaki ikhebula le-DB-9 kuye ku-RJ-45 noma i-adaptha engu-DB-9 kuye ku-RJ-45 ene-CAT5E ikhebula lethusi njengengxenye yephakheji yedivayisi. Uma udinga ikhebuli yekhonsoli, ungayi-oda ngokuhlukene ngengxenye yenombolo JNP-CBL-RJ45DB9 (i-adaptha ye-DB-9 kuye ku-RJ-45 ngentambo yethusi ye-CAT5E).
Ukuze ukhweze i-SRX320 endaweni yokubeka, uzodinga uku-oda ikhithi yokubeka elungele ukufakwa kwakho.
Ikhithi yokukhweza edingekayo incike ekutheni unayo yini imodeli ye-PoE noma engeyona ye-PoE SRX320, nokuthi ingabe usunayo yini ithreyi ye-adaptha yokunikezela amandla. Bheka ithebula elilandelayo ukuze ubone ukuthi iyiphi ikhithi yokukhweza oyidingayo.

Imodeli	I-Rack Mount Kit enethreyi ye-Adaptha Yokuhlinzeka Ngamandla	I-Rack Mount Kit Ngaphandle Kwethreyi Ye-adaptha Yokuhlinzekwa Kwamandla
I-SRX320 (imodeli engeyona ye-PoE)	I-SRX320-RMK0 Ifaka: • Izikulufu zokukhweza ze-Phillips ezinamakhanda ayisicaba angu-M3x5mm • Ubakaki owodwa wokukhweza • Ithreyi ye-adaptha kagesi eyodwa kanye nabakaki ababili besivalo se-adaptha	I-SRX320-RMK1 Ifaka: • Izikulufu zokukhweza ze-Phillips ezinamakhanda ayisicaba angu-M3x5mm • Abakaki ababili abagxumekayo
I-SRX320 (imodeli ye-PoE)	I-SRX320-P-RMK0 Ifaka: • Izikulufu zokukhweza ze-Phillips ezinamakhanda ayisicaba angu-M3x5mm • Ubakaki owodwa wokukhweza • Ithreyi ye-adaptha kagesi eyodwa kanye nabakaki abathathu besivalo se-adaptha	I-SRX320-P-RMK1 Ifaka: • Izikulufu zokukhweza ze-Phillips ezinamakhanda ayisicaba angu-M3x5mm • Abakaki ababili abagxumekayo

Uzodinga futhi ukuhlinzeka:

• Umuntu ozokusiza ukuthi ufake
• Izikulufu zokubeka i-rack ezifanele irack yakho
• Inombolo 2 Phillips (+) screwdriver

I-Rack It

1. Review Izinkombandlela Zokuphepha Ezijwayelekile Nezixwayiso.
2. Goqa futhi ubophe umkhawulo owodwa webhande lesisekelo le-electrostatic discharge (ESD) esihlakaleni sakho esingenalutho, bese uxhuma enye indawo endaweni ye-ESD.
3. Namathisela ubakaki okhwezwayo kanye nethreyi ye-adaptha yokunikeza amandla ezinhlangothini ze-SRX320 usebenzisa izikulufu eze nekhithi yokufaka i-rack kanye ne-screwdriver.
4. Faka i-adaptha yokunikeza amandla ethreyini.
5. Phakamisa i-SRX320 futhi uyibeke endaweni yokubeka. Faka imbobo engezansi kubakaki abakhwezwayo ngembobo kumzila ngamunye wokubeka, uqinisekise ukuthi i-SRX320 isezingeni.
6. Ngenkathi ubambe i-SRX320 endaweni, faka umuntu wesibili bese uqinisa izikulufu zokubeka i-rack ukuze uvikele ithreyi ye-adaptha kanye nabakaki bokukhweza kumareyili akhwezayo. Qiniseka ukuthi uqinisa izikulufu ezimbotsheni ezimbili ezingezansi kuqala bese uqinisa izikulufu ezimbotsheni ezimbili eziphezulu.
7. Hlola ukuthi amabakaki afakayo ohlangothini ngalunye lwerack asezingeni.

Vula
Manje njengoba usuyifakile i-SRX320 endaweni yokubeka, usulungele ukuyixhuma emandleni.

1. Goqa futhi ubophe umkhawulo owodwa webhande lesisekelo le-electrostatic discharge (ESD) esihlakaleni sakho esingenalutho, bese uxhuma enye indawo endaweni ye-ESD.
   QAPHELA: Uma i-SRX320 inethreyi ye-adaptha yokunikezela, ungenza isinyathelo 2 no-3 nge-adaptha yokuhlinzeka amandla ehlezi kuthreyi.
2. Xhuma isiphetho sesixhumi se-DC sekhebuli yamandla kusixhumi samandla ngemuva kwe-SRX320.
3. Xhuma isiphetho se-adaptha ye-AC yekhebuli yamandla ku-adaptha yokunikeza amandla.
4. Uma umthombo wamandla we-AC uneswishi yamandla, yivale.
5. Xhuma intambo yamandla kumthombo wamandla we-AC.
6. Uma umthombo wamandla we-AC uneswishi yamandla, yivule.
   I-SRX320 iba namandla ngokushesha nje uma uyixhuma emandleni. Lapho i-STAT LED kuphaneli yangaphambili ikhanya ngokuluhlaza okuqinile, i-SRX320 isilungele ukusetshenziswa.

Isinyathelo sesi-2: Phezulu bese uyagijima

Manje njengoba i-SRX320 isivuliwe, asenze ukulungisa okuthile ukuze siyivuse futhi isebenze kunethiwekhi.
QAPHELA: Qiniseka ukuthi uhlole yethu Ukusethwa Okuqondisiwe: I-SRX300 Line Firewalls. Ukusethwa Kwethu Okuqondisiwe kuqala lapho lolu suku Lokuqala+ luphela khona, lunikeza imiyalelo yesinyathelo ngesinyathelo yokuthi ungayivikela kanjani futhi uqinisekise kalula indawo yegatsha lakho.

Izinketho Zokuhlinzeka nge-SRX320
Kulula ukunikeza nokuphatha i-SRX320 namanye amadivayisi kunethiwekhi yakho. Khetha ithuluzi lokumisa elikulungele:

• Imiyalo kaJunos CLI. Kulo mhlahlandlela sikubonisa ukuthi ungayimisa kanjani i-SRX320 ngemiyalo ye-CLI esebenzisa ipulaki nokudlala okuzenzakalelayo kwasembonini.
• J-Web, Juniper Networks GUI ifakwe kuqala ku-SRX320. Ukuze uthole ulwazi ngokwenza ukumisa kokuqala usebenzisa i-J-Web isethaphu wizadi bona Lungiselela Amadivayisi e-SRX Usebenzisa i-J-Web Setha iWizadi ku-J-Web Umhlahlandlela Womsebenzisi wamadivayisi ochungechunge we-SRX.
• Juniper Networks izicelo Cloud-based. Lezi zinhlelo zokusebenza zifaka ipulaki nokudlala ukuze usheshe uqalise ukusebenza kunethiwekhi:
• I-Juniper Sky™ Enterprise, i-Juniper Networks-isingethwe i-Software esekwe ngamafu yomphakathi njengesixazululo sesevisi (SaaS). Uzodinga ukuba nesevisi yokubhalisela iJuniper Sky Enterprise ngaphambi kokuthi uyisebenzise ukuze ulungiselele i-SRX320. Ukuze uthole ukwaziswa okwengeziwe, bheka i- Juniper Sky Enterprise Umhlahlandlela Wokuqalisa.
• I-Contrail Service Orchestration (CSO). Uma usebenzisa i-Junos OS Release 19.2 noma ngaphambi kwalokho, ungasebenzisa i-Juniper Networks Network Service Controller ukuze ulungiselele i-SRX320 nge-ZTP. Isilawuli Sesevisi Yenethiwekhi siyingxenye ye-CSO. Bheka Lungiselela Idivayisi Usebenzisa i-ZTP ngeJuniper Networks Network Service Controller.
  Ukuze usebenzise i-CSO, uzodinga ikhodi yokuqinisekisa. Bona i- I-Contrail Service Orchestration (CSO) Umhlahlandlela Wokuthumela.

Ukucushwa kokuqala usebenzisa i-CLI

Ungasebenzisa imbobo yekhonsoli ku-SRX ukwenza ukumisa kokuqala. Lesi sigaba sithatha ukuthi uqala kusukela ekucushweni okuzenzakalelayo kwefekthri. Bheka I-SRX320 Firewall Hardware Guide ngemininingwane yokucushwa okuzenzakalelayo kwefekthri kwe-SRX320.
Ngemva kokumisa i-SRX320, ungangena embobeni yendawo ye-LAN, noma ukude usebenzisa isixhumi esibonakalayo se-WAN, ukuze uphathe futhi ulungiselele i-SRX usebenzisa i-CLI noma i-J-Web.
Sincoma ukuthi usebenzise isixhumi esibonakalayo se-ge-0/0/0 ekuxhumekeni kwe-WAN ku-SRX320. Ngokuzenzakalelayo le interface isethwe ukuthi yamukele ukucushwa kwayo kokufinyelela ku-inthanethi kumnikezeli wesevisi.
QAPHELA: Lesi exampLes icabanga ukuthi usebenzisa i-DHCP ukuze ulungiselele isixhumi esibonakalayo se-WAN. Uma umhlinzeki we-WAN engayisekeli i-DHCP ypu uzodinga ukulungiselela mathupha isixhumi esibonakalayo se-WAN kanye nemizila emile ehlobene. Bheka Ukucushwa Kwasekuqaleni kwe-Junos.
Yiba nalolu lwazi ngaphambi kokuthi uqale ukumisa kokuqala:

• Iphasiwedi yezimpande
• Igama lomethuleli

Xhuma Kumbobo Yekhonsoli Ye-serial

1. Xhuma ingxenye eyodwa yekhebula ye-Ethernet ku-adaptha yembobo yochungechunge ye-RJ-45 ukuya ku-DB-9 ye-SRX320 yakho.
   QAPHELA: Asisafaki ikhebuli ye-DB-9 kuye ku-RJ-45 noma i-adaptha ye-DB-9 kuye ku-RJ-45 enentambo yethusi ye-CAT5E njengengxenye yephakheji yedivayisi. Uma udinga ikhebuli yekhonsoli, ungayi-oda ngokuhlukene ngengxenye yenombolo JNP-CBL-RJ45-DB9 (i-adaptha ye-DB-9 kuye ku-RJ-45 enentambo yethusi ye-CAT5E).
2. Xhuma i-RJ-45 ku-DB-9 i-adaptha yembobo yomkhiqizo embobeni ye-serial kudivayisi yokuphatha.
3. Xhuma enye ingxenye yekhebula ye-Ethernet embobeni ye-serial console ku-SRX320.
4. Qala uhlelo lwakho lokusebenza lokulingisa ukuphela kwe-asynchronous (njenge-Microsoft Windows HyperTerminal) bese ukhetha imbobo ye-COM efanelekile ozoyisebenzisa (ngokwesibonelo.ample, COM1).
5. Qinisekisa ukuthi izilungiselelo zembobo ye-serial zisethwe kokumisiwe:
   • Izinga le-Baud—9600
   • Ukulingana—N
   • Izingcezu zedatha—8
   • Izingcezu zokumisa—1
   • Ukulawula ukugeleza—akukho

QAPHELA: Ungakwazi futhi ukuxhuma ku-SRX320 usebenzisa i-mini-USB console port. Bona i- I-SRX320 Hardware Guide.
Yenza Ukucushwa Kokuqala

1. Ngena ngemvume njengomsebenzisi wempande bese uqala i-CLI. Awudingi iphasiwedi uma usebenzisa okumisiwe kwasembonini.
   login: impande
   impande@%cli
   impande>
   QAPHELA: Ungakwazi view izilungiselelo zefekthri ezizenzakalelayo ngokusebenza kombukiso
   umyalo wemodi.
2. Faka imodi yokumisa.
   impande> lungiselela
   [hlela] impande#
3. Njengoba wenza ukumisa kokuqala ngesandla, uzodinga ukususa i-ZTP ekucushweni. Lokhu kumisa imilayezo yelogi ngezikhathi ezithile ebika ngesimo se-ZTP.
   Setha iphasiwedi yokuqinisekisa impande futhi wenze ushintsho ukuze uvale i-ZTP.
   [hlela] impande# susa i-chassis auto-image-upgrade
   impande# susa isistimu yefoni-ekhaya
   i-root# setha i-root-authentication plain-text-password
   Iphasiwedi entsha: iphasiwedi
   Thayipha kabusha iphasiwedi entsha: iphasiwedi
   Khipha umyalo wokuzibophezela ukuze wenze kusebenze ukucushwa kwekhandidethi okukhubaza i-ZTP:
   [hlela] impande# bophezela
4. Nika amandla ukungena kwezimpande nge-SSH, futhi uvumele ukufinyelela kwe-SSH ku-WAN interface (ge-0/0/0).
   [hlela] impande# setha izinsiza zesistimu ssh ukungena ngemvume kwezimpande kuvumela
   impande# setha izindawo zokuphepha-zone ukungathembeki ukuxhumana kwe-ge-0/0/0.0 host-inbound-traffic
   izinkonzo zesistimu ssh
5. Lungiselela igama lomethuleli.
   [hlela] impande# setha igama lomsingathi wesistimu
6. Yilokho kuphela! Ukucushwa kokuqala kuqediwe. Zibophezele ukumisa ukuze wenze izinguquko ku-SRX zisebenze.
   [hlela] impande# bophezela

Siyakuhalalisela! I-SRX Yakho Ivuliwe Futhi Iyasebenza
I-SRX320 yakho manje isiku-inthanethi futhi inikeza ukufinyelela kwe-inthanethi okuphephile kumadivayisi anamathiselwe ezimbobeni ze-LAN.
Ungaphatha idivayisi endaweni futhi ukude, usebenzisa i-Junos CLI, J-Web, noma isevisi esekelwe emafini. Nansi indlela inethiwekhi yakho ebukeka ngayo:

Izinto ezimbalwa okufanele uzikhumbule mayelana nenethiwekhi yegatsha lakho elisha le-SRX320:

• Ufinyelela i-SRX CLI noma i-J-Web ukusebenzelana komsebenzisi endaweni kusetshenziswa ikheli elithi 192.168.1.1. Ukuze ufinyelele i-SRX ukude, cacisa ikheli le-IP elinikezwe umhlinzeki we-WAN. Vele ukhiphe kalula izixhumanisi zombukiso ze-ge-0/0/0 terse CLI umyalo ukuze uqinisekise ikheli elisetshenziswa isixhumi esibonakalayo se-WAN.
• Amadivayisi anamathiselwe ezimbobeni ze-LAN alungiselelwe ukusebenzisa i-DHCP. Bathola ukucushwa kwenethiwekhi yabo ku-SRX. Lawa madivayisi athola ikheli le-IP kusuka ku-192.168.1.0/24 ikheli pool futhi asebenzise i-SRX njengesango labo elizenzakalelayo.
• Zonke izimbobo ze-LAN ziku-subnet efanayo enoxhumo lwe-Layer 2. Yonke ithrafikhi ivunyelwe phakathi kwezindawo zokusebenzelana zendawo ethembekile.
• Yonke ithrafikhi evela endaweni yokuthembana ivunyelwe endaweni engathenjwa. Ithrafikhi yokuphendula efanayo ivunyelwe ukubuya kusukela kokungathenjwa kuya endaweni yokwethenjwa. Ithrafikhi esuka endaweni engathenjwa ivinjiwe endaweni yokwethenjwa.
• I-SRX yenza umthombo we-NAT (S-NAT) isebenzisa i-IP yesixhumi esibonakalayo se-WAN ngethrafikhi ethunyelwe ku-WAN esuka endaweni yokuthembana.
• Ithrafikhi ehlotshaniswa namasevisi athile esistimu (i-HTTPS, i-DHCP, i-TFTP, ne-SSH) ivunyelwe ukusuka endaweni yokungathenjwa kuya kumsingathi wendawo. Zonke izinsiza zokusingatha zendawo kanye nezinqubo ezilandelwayo zivunyelwe kuthrafikhi evela endaweni yokwethenjwa.

Isinyathelo sesi-3: Qhubeka

Siyakuhalalisela! I-SRX320 yakho imisiwe futhi ilungele ukuhamba. Nazi ezinye izinto ongazenza ngokulandelayo.
Yini Okulandelayo?
QAPHELA: Ngokushesha lungiselela futhi uqinisekise ihhovisi legatsha elivikelekile ngezinyathelo ezimbalwa ezilula nezethu Ukusethwa Okuqondisiwe: I-SRX300 Line Firewalls. Ukusethwa Kwethu Okuqondisiwe kuqala lapho lo mhlahlandlela woSuku Lokuqala+ uphela khona futhi uklanyelwe ukuthola indawo yegatsha lakho ku-inthanethi futhi uvikeleke ngokushesha.

Uma ufuna	Khona-ke
Lungiselela ukuxhumana	Bona i- I-Interfaces Umhlahlandlela Womsebenzisi Wokuphepha
Lungiselela ngokushesha ukuxhumana kwenethiwekhi, izindawo zokuphepha, izinqubomgomo ze-Firewall, nezinqubomgomo ze-NAT	Bona i- Ezokuphepha J-Web Umhlahlandlela Wokuqalisa
Lungiselela izinqubo zokuphatha inethiwekhi nobuchwepheshe	Bona i- I-Network Management and Monitoring Guide
Setha i-SRX320 yakho ngezinyathelo zokuphepha ezithuthukisiwe ukuze uvikele futhi uvikele inethiwekhi yakho	Vakashela Usuku Lokuqala: I-SRX Series Up and Running With Advanced Security Services
Phatha ukuthuthukiswa kwesofthiwe ku-SRX320 yakho	Bheka Ifaka Isoftware kumadivayisi e-SRX Series
Thola ukuzizwisa ngenqubo efakwe kulo mhlahlandlela	Vakashela Juniper Networks Virtual Labs bese ugcine i-sandbox yakho yamahhala. Uzothola i-Junos Day One Experience sandbox esigabeni sokuma sodwa.

Ulwazi oluvamile

Uma ufuna	Khona-ke
Landa, wenze kusebenze, futhi uphathe amalayisensi esofthiwe yakho ukuze uvule izici ezengeziwe ze-SRX Firewall yakho	Bheka Yenza kusebenze amalayisense e-Junos OS kwe I-Juniper Licensing Guide
Bona wonke amadokhumenti atholakalayo e-SRX320	Vakashela Umbhalo we-SRX320 ikhasi kuJuniper TechLibrary
Lungiselela i-SRX320 nge-Junos OS CLI	Qala nge Usuku Lokuqala+ lwe-Junos OS umhlahlandlela
Lungiselela i-SRX320 usebenzisa i-J-Web	Bheka J-Web ye-SRX Series Documentation

Hlala unolwazi lwakamuva ngezici ezintsha nezishintshile nezinkinga ezaziwayo nezixazululiwe	Bheka Amanothi okukhishwa kwe-Junos OS
Sebenzisa izici zokumisa ezithuthuke kakhulu ezinikezwa yiJuniper Contrail Service Orchestration (CSO) kanye neJuniper Sky Enterprise.	Uzodinga i-akhawunti nekhodi yokwenza kusebenze. Le mihlahlandlela izokusiza ukuthi uqalise: Contrail Service Orchestration (CSO) Deployment Guide kanye ne Juniper Sky Enterprise Umhlahlandlela Wokuqalisa.

Funda Ngamavidiyo
Umtapo wethu wamavidiyo uyaqhubeka nokukhula! Sidale amavidiyo amaningi, amaningi abonisa ukuthi ungayenza kanjani yonke into kusukela ekufakeni ihadiwe yakho ukuze ulungiselele izici ezithuthukisiwe zenethiwekhi ye-Junos OS. Nazi ezinye izinsiza ezinhle zevidiyo nezokuqeqesha ezizokusiza ukuthi wandise ulwazi lwakho lwe-Junos OS.

Uma ufuna	Khona-ke
View a Web-Ividiyo yokuqeqeshwa esekwe enikeza ngaphezuluview ye-SRX320 futhi ichaza indlela yokufaka nokuyilungisa	I-SRX300 kanye ne-SRX320 Firewalls Overview kanye Nokuthunyelwa (WBT)
Thola amathiphu amafushane nafushane nemiyalo enikeza izimpendulo ezisheshayo, ukucaca, kanye nokuqonda ezicini ezithile nemisebenzi yobuchwepheshe beJuniper	Bheka Ukufunda ngeJuniper ekhasini eliyinhloko le-Juniper Networks le-YouTube
View uhlu lokuqeqeshwa kwamahhala kwezobuchwepheshe esikunikeza eJuniper	Vakashela i- Ukuqalisa ikhasi kuJuniper Learning Portal

I-Juniper Networks, ilogo ye-Juniper Networks, i-Juniper, ne-Junos yizimpawu zokuthengisa ezibhalisiwe ze-Juniper Networks, Inc. e-United States nakwamanye amazwe. Zonke ezinye izimpawu zokuthengisa, izimpawu zesevisi, amamaki abhalisiwe, noma izimpawu zesevisi ezibhalisiwe ziyimpahla yabanikazi bazo. IJuniper Networks ayinaso isibopho sanoma yikuphi ukungalungi kulo mbhalo. I-Juniper Networks igodla ilungelo lokushintsha, ukulungisa, ukudlulisa, noma ukubuyekeza lokhu kushicilelwa ngaphandle kwesaziso. Copyright © 2023 Juniper Networks, Inc. Wonke amalungelo agodliwe.

Amadokhumenti / Izinsiza

	Juniper NETWORKS SRX320 Services Gateway [pdf] Umhlahlandlela Womsebenzisi SRX320, SRX320 Services Gateway, Services Gateway, Gateway
	Juniper NETWORKS SRX320 Services Gateway [pdf] Umhlahlandlela Womsebenzisi I-SRX320 Services Gateway, SRX320, Services Gateway, Gateway

Izithenjwa

• Imaniwali yosebenzisayo