Install JUNOS Space Virtual Appliance at ESXi 5.5 - NETSEC

Latest

Learning, Sharing, Creating

Cybersecurity Memo

Saturday, May 9, 2015

Install JUNOS Space Virtual Appliance at ESXi 5.5

Juniper NSM (Network Security Management) will be end of life for support on Nov 29 2015.

ProductEOL
Announced
Last OrderLast Date to
Convert Warranty
Same Day Support
Discontinued
Next Day Support
Discontinued
End of
Support
NSMXpress, NSM 300001/30/201507/31/201507/31/201607/31/201707/31/201907/31/2020
NS-SM-A2-CM, NS-SM-A2-HA05/13/201410/31/201410/31/201510/31/201610/31/201810/31/2019
NS-SM-A-BSE, NS-SM-A-CM, NS-SM-A-HA06/01/201011/29/201011/29/201111/29/201211/29/201411/29/2015

Junos Space is the next comprehensive network management solution that simplifies and automates management of Juniper’s switching, routing, and security devices. Junos Space Network Management Platform works with other management applications to deliver comprehensive management of Juniper devices including:
  • Edge Services Director
  • Security Director
  • Services Activation Director
  • Network Director
  • Service Now
  • Service Insight
  • Content Director
  • Virtual Director
In this post, detailed steps with screenshots will present you a easy guide to install a JunOS Space Virtual Appliance into Vmware ESXi 5.5.



1. Download space-14.1R2.9.ova 

Download OVA file from Juniper Website (Click Here) with your account. Remember to choose Image for Virtual Appliance.

2. In ESXi 5.5, Deploy OVA Template -> Choose downloaded ova file





3. Start Juniper JunOS Space in ESXi 5.5 and Complete basic configuration

3.1 User IDs

After you first time logged into Juniper Space with default account, you will be asked to change admin password right away.

There are three different user IDs for Juniper JunOS Space as follows:

  • admin user for CLI login  (default password: abc123)
  • super user for WebUI (default password: juniper123)
  • Maintenance user for maintenance operations. The password is set by the admin user during the initial configuration (that is, there is no default password).




3.2 Network Interfaces

By default, JunOS Space Virtual Appliance have four network interfaces:
  • eth0 -  SSH and device management if eth3 is not configured (node IP). But Secure Shell Daemon (sshd) is listening on all IP addresses.
    • eth0:0 - GUI interface with an instance of JBOSS running (GUI). The web GUI interface is only on the VIP, the same subnet as eth0.
  • eth1 - Not supported before Junos Space Network Management Platform Release 14.1R1. From 14.1R1 onwards you can configure the eth1 Ethernet interface as an administrative interface.
  • eth2 - Not supported
  • eth3 - Device management when managed devices are on a subnet and not reachable by way of eth0. Device management, outbound (discover) and inbound (post-discovery), including syslog and DMI, should be eth3, or eth0 if eth3 is not configured.

Configure Eth0:

Configure Eth3 for Device Management  and configure eth0.0 for Web GUI:

Configuration Summary:
Eth0: 192.168.2.70  Gateway: 192.168.2.1  DNS: 8.8.8.8
Eth3: 172.17.3.70
Eth0.0 : 192.168.2.72
Note: Eth0.0 IP Address has to be in same network as Eth0.

3.3 Apply Settings

 The following five screen shots are showing the system configuring process:


3.4 Web GUI 


3.5 SSH Session

SSH works on all Interfaces. Following output is SSH session on eth0 interface:



Last login: Tue Aug 18 15:55:47 2015

Welcome to the Junos Space network settings utility.

Initializing, please wait

Junos Space Settings Menu

1> Change Password
2> Change Network Settings
3> Change Time Options
4> Retrieve Logs
5> Security
6> Expand VM Drive Size
7> (Debug) run shell

A> Apply changes
Q> Quit
R> Redraw Menu

Choice [1-7,AQR]: 7

[sudo] password for admin: 
[root@space-005056920010 ~]# ifconfig
eth0      Link encap:Ethernet  HWaddr 00:50:56:92:00:10  
          inet addr:192.168.2.70  Bcast:192.168.2.255  Mask:255.255.255.0
          inet6 addr: fe80::250:56ff:fe92:10/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:13408 errors:0 dropped:0 overruns:0 frame:0
          TX packets:20862 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:2127342 (2.0 MiB)  TX bytes:18231701 (17.3 MiB)

eth0:0    Link encap:Ethernet  HWaddr 00:50:56:92:00:10  
          inet addr:192.168.2.72  Bcast:192.168.2.255  Mask:255.255.255.0       
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1

eth1      Link encap:Ethernet  HWaddr 00:50:56:92:00:11  
          inet6 addr: fe80::250:56ff:fe92:11/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1134 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:87488 (85.4 KiB)  TX bytes:758 (758.0 b)

eth2      Link encap:Ethernet  HWaddr 00:50:56:92:00:12  
          inet6 addr: fe80::250:56ff:fe92:12/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1100 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:85012 (83.0 KiB)  TX bytes:758 (758.0 b)

eth3      Link encap:Ethernet  HWaddr 00:50:56:92:00:13  
          inet6 addr: fe80::250:56ff:fe92:13/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:1071 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:83708 (81.7 KiB)  TX bytes:758 (758.0 b)

lo        Link encap:Local Loopback  
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:3085894 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3085894 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0 
          RX bytes:2317104090 (2.1 GiB)  TX bytes:2317104090 (2.1 GiB)

4. Log into Web UI

Before you are able to successfully see JunOS Space log in window, you may see a progress bar presenting you the process starting:


Web GUI only works on eth0.0 interface, which is ip 192.168.2.72, not on 192.168.2.70, although they are on same network. Default username and password is 'super' and 'juniper123'.



Reference:

1. Deploying a Junos Space Virtual Appliance
2. Junos Space Virtual Appliance
3. Junos ® Space Virtual Appliance Deployment and Configuration Guide





No comments:

Post a Comment