Junos Pulse Gateway CMC Quick Start

Use the instructions in this quick start to help you install and configure the Junos Pulse
Gateway Chassis Management Card (CMC). The CMC can be installed only in the
MAG6600 and MAG6611 devices. For details, see the Junos Pulse Gateway Hardware
Guide and the Junos Pulse Gateway MAG-CM060 Administration Guide at
www.juniper.net/support/products/mag .

1.

CMC Front Panel

Task 3: Connect the Management Device

2.
3.

Gently pry the faceplate from the chassis using your fingers or a flat-blade screw
driver.
Using a Phillips screw driver, remove the two screws and then remove the metal
plate.
Slide the CMC into the slot and tighten the thumb screws until finger tight.

To use a system console to configure and manage the CMC, connect an RS-232 serial
cable from the CONSOLE port on the CMC to the serial port on the management device.

Task 4: Connect the CMC to the Network

Connect CMC port 0 (em0) to your management network.

Task 5: Power On the Junos Pulse Gateway

Momentarily press and hold the power switch located on the back of the Junos Pulse
Gateway chassis to turn on the device.

Configuring the CMC

Callout

Description

CONSOLE port

Ethernet Ports 0 (em0) and 1 (em1)

USB Port

Task 1: Run the ezsetup Script

LEDs (Power, Activity, Alarm)

Power button (powers the CMC only, not the Junos Pulse Gateway chassis)

NOTE: The ezsetup script prompts for the CMC port 0 (em0) address. To use the CMC to
SSO to an application module, em0 must be on the same subnet with at least one port on
that application module.

Installing the CMC

Run the ezsetup script to set general network connectivity settings; then use the J-Web
interface or CLI to complete the configuration process.

1.

Use the instructions below to install the CMC in your Junos Pulse Gateway.

Task 1: Power Off the Junos Pulse Gateway

Press and hold the power switch located on the back of the Junos Pulse Gateway
chassis for 5-10 seconds to power off the device.

Task 2: Remove the Faceplace and Install the CMC into the Service
Module
Install the service module and then install the CMC into the service module blade. The
CMC can be installed in an even-numbered slot (for example, slot 0, 2, 4) within an
installed service module.
IMPORTANT: Faceplates are required for proper chassis airflow and cooling. Do not
remove the faceplate unless you intend to install the CMC.If you remove a CMC or a
service module and do not intend to replace it, cover the opening with a faceplate.

2.
3.
4.

Configure a console terminal or terminal emulation utility running on a computer,

such as HyperTerminal, to use the following serial connection parameters:

9600 bits per second

8-bit no parity (8N1)

1 stop bit

No flow control
Press Enter repeatedly until you see a system command prompt.
Type ezsetup and press Return.
Follow the script prompts, as shown below:

root% ezsetup

*************************************************************
* EZSetup wizard
*
*
*
* Use the EZSetup wizard to configure the identity of the chassis.
*
* Once you complete EZSetup, the chassis can be accessed over the network.
*
*
*
* To exit the EZSetup wizard press CTRL+C.
*
*
*
* In the wizard, default values are provided for some options.
*
* Press ENTER key to accept the default values.
*
*
*
* Prompts that contain [Optional] denotes that the option is not mandatory.
*
* Press ENTER key to ignore the option and continue.
*
*
*
*************************************************************

The ezsetup script configures port 0 (em0); do not connect anything to port 1 or configure
port 1.

Task 2: Enabling Secure Web Access

Use CLI commands to enable HTTP or HTTPS web access.
1.

Log in as root.
The root login account has superuser privileges, with access to all commands and
statements.

2.

Start the CLI:

root# cli
root@>

3.

Enter the configuration mode and then use the set system services
web-management commands to enable HTTP or HTTPS access.
root@>edit
root@>set system services web-management http port 80 interface em0.0
root@>set system services web-management https port 443
system-generated-certificate interface em0.0
root@>commit

Initial Setup Configuration

----------------------------------------------Enter System hostname [Optional]:
Enter new root password:
Re-enter the new password:

Task 3: Start the J-Web Interface

Enable Telnet service? [yes|no]. Default [no]:

1.
2.

Enable SSH service? [yes|no]. Default [yes]:

Launch a web browser.

After http:// or https:// in your Web browser, type the IP address of the CMC (from the
ezsetup script), and press Enter.

Configure management interface [em0.0]

Enter Management IP address:
Enter Subnetmask [255.255.0.0]:
Enter Gateway IP address:
Configure SNMP [yes|no], default [yes]:
Enter System Time and Date YYYY:MM:DD:hh:mm:ss [Optional]:
Time Zone [Optional], Enter "yes" to choose Timezone from list:
The input configuration parameters are:
...
Commit the new configuration?
Choosing option "yes" will add new configuration to existing configuration.
Option "No" will allow user to come out of EZSetup wizard.
Choose option [yes|no], default [yes]:
5.

At the confirm commit prompt, enter Yes to continue or No to discard your edits and
exit the ezsetup script.

Page 2

3.

On the login page, type your username and password (from the ezsetup script), and
click Log In.

Setting Up SSO
Clicking an application module in the chassis viewer expands that module, presenting
more information and allowing you to use single sign-on (SSO) to that module. Use the
following instructions to configure and use SSO.

Task 1: Configure General SSO Properties

1.
2.
3.

Select Configure > System Properties > Blade Single Sign On > General
Settings.
Click Global Options to define the SAML assertion timeout and to enable SNMP
traps.
Click Add, select a slot number, and define the sign-in URL for the specified
application module.

Task 2: Configure SSO on the Service Module

Import the same certificate you imported into the CMC. The certificate configures the
appropriate login name, authentication server realm, and so forth required for SSO on
the service module.

Task 3: Single Sign-On to a Module

1.
2.
3.

Click Dashboard.
In the chassis viewer, click the module for which you want to use SSO.
Click the Launch SSO icon (the blue icon with the arrow pointing to the upper right).

Contacting Juniper Networks

For technical support, see www.juniper.net/support/requesting-support.html .

Page 3

Juniper Networks, Junos, Steel-Belted Radius, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. The Juniper Networks Logo, the Junos logo, and JunosE are
trademarks of Juniper Networks, Inc. All other trademarks, service marks, registered trademarks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies
in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. Products made or sold by Juniper Networks or components thereof might be covered by one or more
of the following patents that are owned by or licensed to Juniper Networks: U.S. Patent Nos. 5,473,599, 5,905,725, 5,909,440, 6,192,051, 6,333,650, 6,359,479, 6,406,312, 6,429,706, 6,459,579, 6,493,347, 6,538,518, 6,538,899,
6,552,918, 6,567,902, 6,578,186, and 6,590,785. Copyright 2011, Juniper Networks, Inc. All rights reserved.