My Lab Notes: November 2020

Friday, November 6, 2020

VSRX on GNS3 2.2.16


vSRX Lab Topology

1. Start Appliance and login as root, no password.

FreeBSD/amd64 (Amnesiac) (ttyu0)

Last login: Fri Nov 6 16:36:00 on ttyu0

--- JUNOS 19.2R1.8 Kernel 64-bit XEN JNPR-11.0-20190517.f0321c3_buil

root@:~ #

2. Start CLI and enter configuration mode.

root@:~ # cli

root>

root> configure

Entering configuration mode

[edit]

root#

3. Apply initial configurations

[edit]

root# set system root-authentication plain-text-password

New password:

Retype new password:

[edit]

root# set system host-name vsrx01

4. Configure the management interface

[edit]

root# set interfaces ge-0/0/1 unit 0 family inet address 192.168.254.13/24

[edit]

root# set security zones security-zone trust interfaces ge-0/0/1.0

[edit]

root# commit check

configuration check succeeds

[edit]

root# commit and-quit

commit complete

Exiting configuration mode

root@vsrx01>

5. Test Management Interface connection

root@vsrx01> show interfaces terse

Interface Admin Link Proto Local Remote

ge-0/0/0 up down

gr-0/0/0 up up

ip-0/0/0 up up

lsq-0/0/0 up up

lt-0/0/0 up up

mt-0/0/0 up up

sp-0/0/0 up up

sp-0/0/0.0 up up inet

inet6

sp-0/0/0.16383 up up inet

ge-0/0/1 up up

ge-0/0/1.0 up up inet 192.168.254.13/24

ge-0/0/2 up up

ge-0/0/3 up down

ge-0/0/4 up up

dsc up up

fti0 up up

fxp0 up down

fxp0.0 up down

gre up up

ipip up up

irb up up

lo0 up up

lo0.16384 up up inet 127.0.0.1 --> 0/0

lo0.16385 up up inet 10.0.0.1 --> 0/0

10.0.0.16 --> 0/0

128.0.0.1 --> 0/0

128.0.0.4 --> 0/0

128.0.1.16 --> 0/0

ping management gateway:

root@vsrx01> ping 192.168.254.254

PING 192.168.254.254 (192.168.254.254): 56 data bytes

64 bytes from 192.168.254.254: icmp_seq=0 ttl=64 time=1.556 ms

64 bytes from 192.168.254.254: icmp_seq=1 ttl=64 time=1.282 ms

64 bytes from 192.168.254.254: icmp_seq=2 ttl=64 time=1.277 ms

64 bytes from 192.168.254.254: icmp_seq=3 ttl=64 time=1.266 ms

64 bytes from 192.168.254.254: icmp_seq=4 ttl=64 time=1.442 ms

--- 192.168.254.254 ping statistics ---

5 packets transmitted, 5 packets received, 0% packet loss

round-trip min/avg/max/stddev = 1.266/1.365/1.556/0.116 ms

source: https://www.juniper.net/documentation/en_US/vsrx/topics/task/configuration/security-vsrx-cli-configuring.html

Installing vSRX in Microsoft Hyper-V

image use: junos-vsrx3-x86-64-19.2R1.8.hyperv

Requirements:

-assign memory 4096 MB

- 2 virtual processor

- virtual switches

on this setup, i created 4 external virtual switches. Each is connected to a physical network card.

Initial configuration:

Turn on VM client.

start the CLI and enter configuration mode

Set root authentication password:

root@# set system root-authentication plain-text-password
New password: password
Retype new password: password

Set system host name

[edit]
root@# set system host-name VSRX01

configure management interface

[edit]
root@# set interfaces ge-0/0/0 unit 0 family inet address 192.168.254.13/24

Configure SSH and J-WEB Access

set security zones security-zone trust interfaces ge-0/0/0.0 host-inbound-traffic system-services ssh
set security zones security-zone trust interfaces ge-0/0/0.0 host-inbound-traffic system-services https

[edit]
ariel@VSRX01# set system services web-management https interface ge-0/0/0.0 system-generated-certificate

[edit]
ariel@VSRX01# commit and-quit
commit complete
Exiting configuration mode

Done: Test J-WEB and SSH

Source:

https://www.juniper.net/documentation/en_US/vsrx/topics/task/multi-task/security-vsrx-hyper-v-manager-deploying.html