J-WEB DOCUMENTATION.

J-WEB INITIAL SETUP WIZARDS.

Introduction

Connect the management device to the services gateway using either of the following
methods: Connect an RJ-45 cable (Ethernet cable) from any one port between ge-0/0/1 and
ge-0/0/15 on the front panel to the Ethernet port on the management device (workstation or
laptop). After connecting the management device to the services gateway, the DHCP server
process on the services gateway will assign an IP address automatically to the management
device. Ensure that the management device acquires an IP address on the 192.168.1/24
subnet-work (other than 192.168.1.1) from the device. The services gateway functions as a
DHCP server and will assign an IP address to the management device. By default, the DHCP
server is enabled on the L3 VLAN interface, (IRB) vlan.0 (ge-0/0/1 to ge-0/0/15), which is
configured with an IP address of 192.168.1.1/24. When an SRX device services Gateway is
powered on for the first time, it boots using the factory default configuration.

Setup wizards

1. Launch a Web browser on the management device

2. Enter http://192.168.1.1 in the URL address field. The J-Web login page is displayed.
3. Specify the default user name as root. Do not enter any value in the Password field.
.

[Type text]
 4. Click Log In. The J-Web Initial Setup page is displayed

5. Click on start>

[Type text]
 6. Configure the basic settings such as Host Name, Domain Name, Root Password and
verify Root password
: Ensure that you have configured the IP address and root password before you apply the configuration.

NOTE: All fields marked with an asterisk (*) are mandatory

7. Click Next
8. Enter the default gateway, DNS servers and domain search
Note: optional field

9. Click Next
10.This page enables you to create new VLANs
Note: optional page

[Type text]
 11.Edit an existing VLAN by double-clicking the name or by selecting the row and clicking
Edit

12.Moved the ge-0/0/4.0 to available interface and user can able to configure IPV4
address
13.Enter the Vlan-id, (range :2-4094)
14.Select one or more interfaces in the available Interfaces box, then click the "<<"
button to add to group. You may also remove interfaces by selecting an interface in
the right box and clicking the "<<" button.
15.Click Next

[Type text]
 16.This page shows gigabit Ethernet, Fast Ethernet and Vlan interfaces
Note: Optional page

17.To edit an interface, double-click it, or select the row and click Edit. To add an
interface, click Add.

18.Select the interface from the drop down list

19.Select the DHCP/IP/PPPOE address using radio button
20.Select the zone from the drop down list
21.Select the services by using check box

[Type text]
 22.Click Save
23.Configured interface will appear in configure interface main page

24.Click Next
25.This page enables you to select the way that J-Web behaves when you start it.
26.Select the option in J-web starting page option
27.Select the option in J-web commit options

28.Click Next

[Type text]
 29.This page to set the system time and time zone
(Note: Optional page)

30.Click Next
31.This page shows the system configuration summary

USER SCENARIO 1: SOFWARE UPGRADE USING THE J-WEB

.
Steps:

1. Download the software to local PC

2. Navigate to Maintain > Software> Upload Package page

3. Click on Browse and select the downloaded software

[Type text]
 4. Select reboot options if required and click on Upload and “install package button “

5. Browser will refresh every 1min to provide updated status and the 1st update will be
available once image is copied to router

6. Upload competion time depends on the platform

7. Click on OK once the process is done or select reboot schedule

[Type text]
FTP upload

1. Navigate to Maintain > Software> Install package page for FTP upload

2. Provide FTP server and credential information and click on Fetch and install package
button

[Type text]
 3. UI indicates step by step install progress

[Type text]
 4. Click OK to reboot immediately (if reboot is selected ) or schedule a reboot using
hyperlink

Rollback to Alternative package:

1. Navigate to Maintain > Software> Downgrade page (to rollback to alternative

version )

2. Click on Downgrade button and select the hyper link to schedule a reboot

[Type text]
 Note: during reboot connection to the router will be lost hence there won’t be any
update in the page status.

[Type text]
User Scenario 3: J-WEB FW and NAT wizard:

Steps to configure FW using Wizards

FW wizards

32.Navigate to configure > Wizards > Fw_wizards (after initial setup)

33.Click on start >

34.click on Add>
35.Enter the policy name
36.Select the available zone_address for source and destination address and move to
selected zone/address using Up arrow mark
37.Select the available applications and move to selected application using Up arrow
mark.
38.Select the Action as permit/deny
(Note: All the given fields are mandatory)

[Type text]
 39.Click save, and it will reflect in firewall policy table

[Type text]
VPN Wizard
1. Navigate to configure > Wizards > VPN_wizards (after initial setup)
2. Click on start >

3. Enter VPN name

4. Select a security zone for the local private network from the list.
5. Add network addresses to identify the local networks for the VPN. Add addresses by
entering them and clicking Add.
6. Enter the ST0 interface, number should be between (0-65535)
7. Select a security zone for the interface from the list
8. Indicate whether the interface is numbered (an IP address) or unnumbered
9. Select an interface for the public network from the lists provided
10.Select an interface zone for the public network from the lists provided.
11.Indicate the interface type, either static/dynamic

[Type text]
 12.Add remote Gateway Public IP
13.Add IP addresses for the remote private networks and clicking Add.

14.Select the IKE security level

15.Select the IKE mode
16.Enter IKE preshared key (Ascii)
17.Select the IPSec security level
18.Select the IPSec forward secrecy
19.Select the optional choice VPN monitor, Dead peer Detection

[Type text]
 20.Select the optional field

21. click commit

[Type text]
[Type text]
 NAT Wizard
1. Navigate to configure > Wizards > NAT_wizards (after initial setup)
2. Click on start >

3. Click Add enter rule name

4. Indicate whether the rule specifies a zone or an interface for the direction the traffic
comes from
5. Select the list and move to the RHS
6. Enter a destination address in the form of a host address or a network address.
7. Specify the address to use to perform static NAT

[Type text]
[Type text]