Info Security Memo
  • Blog
  • Sitemap
    • Categories
  • Contact
  • About
  • Resources
  • Tools
  • 51sec.org

Build Confidence

Focusing on Information Security 

Info Security Notes

Install JUNOS Space Virtual Appliance at ESXi 5.5

5/10/2015

0 Comments

 
Juniper NSM (Network Security Management) will be end of life for support on Nov 29 2015.

Product EOL
Announced
Last Order Last Date to
Convert Warranty
Same Day Support
Discontinued
Next Day Support
Discontinued
End of
Support
NSMXpress, NSM 3000 01/30/2015 07/31/2015 07/31/2016 07/31/2017 07/31/2019 07/31/2020
NS-SM-A2-CM, NS-SM-A2-HA 05/13/2014 10/31/2014 10/31/2015 10/31/2016 10/31/2018 10/31/2019
NS-SM-A-BSE, NS-SM-A-CM, NS-SM-A-HA 06/01/2010 11/29/2010 11/29/2011 11/29/2012 11/29/2014 11/29/2015

Junos Space is the next comprehensive network management solution that simplifies and automates management of Juniper’s switching, routing, and security devices. Junos Space Network Management Platform works with other management applications to deliver comprehensive management of Juniper devices including:

  • Edge Services Director
  • Security Director
  • Services Activation Director
  • Network Director
  • Service Now
  • Service Insight
  • Content Director
  • Virtual Director

In this post, detailed steps with screenshots will present you a easy guide to install a JunOS Space Virtual Appliance into Vmware ESXi 5.5.

1. Download space-14.1R2.9.ova 

Download OVA file from Juniper Website (Click Here) with your account. Remember to choose Image for Virtual Appliance.

2. In ESXi 5.5, Deploy OVA Template -> Choose downloaded ova file





3. Start Juniper JunOS Space in ESXi 5.5 and Complete basic configuration

3.1 User IDs

After you first time logged into Juniper Space with default account, you will be asked to change admin password right away.

There are three different user IDs for Juniper JunOS Space as follows:

  • admin user for CLI login  (default password: abc123)
  • super user for WebUI (default password: juniper123)
  • Maintenance user for maintenance operations. The password is set by the admin user during the initial configuration (that is, there is no default password).




3.2 Network Interfaces

By default, JunOS Space Virtual Appliance have four network interfaces:
  • eth0 -  SSH and device management if eth3 is not configured (node IP). But Secure Shell Daemon (sshd) is listening on all IP addresses.
    • eth0:0 - GUI interface with an instance of JBOSS running (GUI). The web GUI interface is only on the VIP, the same subnet as eth0.
  • eth1 - Not supported before Junos Space Network Management Platform Release 14.1R1. From 14.1R1 onwards you can configure the eth1 Ethernet interface as an administrative interface.
  • eth2 - Not supported
  • eth3 - Device management when managed devices are on a subnet and not reachable by way of eth0. Device management, outbound (discover) and inbound (post-discovery), including syslog and DMI, should be eth3, or eth0 if eth3 is not configured.

Configure Eth0:

Configure Eth3 for Device Management  and configure eth0.0 for Web GUI:

Configuration Summary:
Eth0: 192.168.2.70
Gateway: 192.168.2.1
DNS: 8.8.8.8
Eth3: 172.17.3.70
Eth0.0 : 192.168.2.72

3.3 Apply Settings

 The following five screen shots are showing the system configuring process:


3.4 Web GUI 


3.5 SSH Session

SSH works on all Interfaces. Following output is SSH session on eth0 interface:


login as: adminSpace release 14.1R2.9 (338701)
[email protected]'s password:Last login: Sun May 10 01:35:23 2015
Welcome to the Junos Space network settings utility.
Initializing, please wait
Junos Space Settings Menu
1> Change Password2> Change Network Settings3> Change Time Options4> Retrieve Logs5> Security6> Expand VM Drive Size7> (Debug) run shell
A> Apply changesQ> QuitR> Redraw Menu
Choice [1-7,AQR]: 7
[sudo] password for admin:[root@space-000c29be17bb ~]# ifconfigeth0      Link encap:Ethernet  HWaddr 00:0C:29:BE:17:BB          inet addr:192.168.2.70  Bcast:192.168.2.255  Mask:255.255.255.0          inet6 addr: fe80::20c:29ff:febe:17bb/64 Scope:Link          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1          RX packets:2077 errors:0 dropped:0 overruns:0 frame:0          TX packets:1132 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:1000          RX bytes:194507 (189.9 KiB)  TX bytes:490534 (479.0 KiB)
eth0:0    Link encap:Ethernet  HWaddr 00:0C:29:BE:17:BB          inet addr:192.168.2.72  Bcast:192.168.2.255  Mask:255.255.255.0          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
eth1      Link encap:Ethernet  HWaddr 00:0C:29:BE:17:C5          inet6 addr: fe80::20c:29ff:febe:17c5/64 Scope:Link          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1          RX packets:942 errors:0 dropped:0 overruns:0 frame:0          TX packets:16 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:1000          RX bytes:74039 (72.3 KiB)  TX bytes:1336 (1.3 KiB)
eth2      Link encap:Ethernet  HWaddr 00:0C:29:BE:17:CF          inet6 addr: fe80::20c:29ff:febe:17cf/64 Scope:Link          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1          RX packets:944 errors:0 dropped:0 overruns:0 frame:0          TX packets:16 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:1000          RX bytes:74961 (73.2 KiB)  TX bytes:1336 (1.3 KiB)
eth3      Link encap:Ethernet  HWaddr 00:0C:29:BE:17:D9          inet addr:172.17.3.70  Bcast:172.17.3.255  Mask:255.255.255.0          inet6 addr: fe80::20c:29ff:febe:17d9/64 Scope:Link          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1          RX packets:948 errors:0 dropped:0 overruns:0 frame:0          TX packets:30 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:1000          RX bytes:75270 (73.5 KiB)  TX bytes:2496 (2.4 KiB)
lo        Link encap:Local Loopback          inet addr:127.0.0.1  Mask:255.0.0.0          inet6 addr: ::1/128 Scope:Host          UP LOOPBACK RUNNING  MTU:16436  Metric:1          RX packets:230993 errors:0 dropped:0 overruns:0 frame:0          TX packets:230993 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:0          RX bytes:502661230 (479.3 MiB)  TX bytes:502661230 (479.3 MiB)

4. Log into Web UI

Web GUI only works on eth0.0 interface, which is ip 192.168.2.72, not on 192.168.2.70, although they are on same network. Default username and password is 'super' and 'juniper123'.



Reference:

1. Deploying a Junos Space Virtual Appliance
2. Junos Space Virtual Appliance
3. Junos ® Space Virtual Appliance Deployment and Configuration Guide








0 Comments



Leave a Reply.

    Categories

    All
    Architecture
    Blog
    Checkpoint
    Cisco
    Cloud
    CyberArk
    F5
    Fortigate
    Guardium
    Juniper
    Linux
    Network
    Others
    Palo Alto
    Qualys
    Raspberry Pi
    Security
    SIEM
    Software
    Vmware
    VPN
    Wireless

    Archives

    March 2024
    February 2024
    January 2024
    December 2023
    November 2023
    October 2023
    September 2023
    August 2023
    July 2023
    June 2023
    May 2023
    April 2023
    March 2023
    February 2023
    January 2023
    December 2022
    November 2022
    October 2022
    September 2022
    August 2022
    July 2022
    June 2022
    May 2022
    April 2022
    March 2022
    February 2022
    January 2022
    December 2021
    November 2021
    October 2021
    September 2021
    August 2021
    July 2021
    June 2021
    May 2021
    April 2021
    March 2021
    February 2021
    January 2021
    December 2020
    November 2020
    October 2020
    September 2020
    August 2020
    July 2020
    October 2019
    September 2019
    June 2019
    July 2018
    May 2018
    December 2017
    August 2017
    April 2017
    March 2017
    January 2017
    December 2016
    November 2016
    October 2016
    September 2016
    August 2016
    July 2016
    June 2016
    May 2016
    April 2016
    March 2016
    February 2016
    January 2016
    December 2015
    November 2015
    October 2015
    September 2015
    August 2015
    July 2015
    June 2015
    May 2015
    April 2015
    March 2015

    Print Page:

    RSS Feed

    Email Subscribe
Powered by Create your own unique website with customizable templates.
  • Blog
  • Sitemap
    • Categories
  • Contact
  • About
  • Resources
  • Tools
  • 51sec.org