Juniper SSG-20-SB 用户手册
Copyright © 2010, Juniper Networks, Inc.
3
APPLICATION NOTE - Configuring the CX111 for the SSG Series
Introduction
Enterprise branches need WAN resiliency to provide uninterrupted service to their customers and employees alike.
This has direct implication to the revenue and operational costs. Financial transactions such as credit card processing,
disaster recovery situations such as wired-line failures due to natural causes, temporary/first day connectivity needs
have necessitated increased up-time with the enterprise HQ (head quarter) or the data center. So far, ISDN, DSL or
dial-up modems have provided majority of the WAN backup connectivity options. These services are usually low-
speed, high latency and have high recurring costs.
This has direct implication to the revenue and operational costs. Financial transactions such as credit card processing,
disaster recovery situations such as wired-line failures due to natural causes, temporary/first day connectivity needs
have necessitated increased up-time with the enterprise HQ (head quarter) or the data center. So far, ISDN, DSL or
dial-up modems have provided majority of the WAN backup connectivity options. These services are usually low-
speed, high latency and have high recurring costs.
Due to their ubiquitous presence, the use of third-generation (3G) wireless networks has become a common
deployment option for both primary and backup connectivity. With the introduction of Juniper Networks
deployment option for both primary and backup connectivity. With the introduction of Juniper Networks
®
CX111
Cellular Broadband Data Bridge, Juniper offers a simple way to provide wireless connectivity when used as a backup
3G connection (Juniper Networks SSG5 Secure Services Gateway and SSG20 Secure Services Gateway only) or as a
primary connection (all Juniper Networks SSG Series Secure Services Gateways).
3G connection (Juniper Networks SSG5 Secure Services Gateway and SSG20 Secure Services Gateway only) or as a
primary connection (all Juniper Networks SSG Series Secure Services Gateways).
Scope
The purpose of this application note is to provide an overview that shows how to configure and deploy the CX111 for
3G wireless WAN termination using the CX111 Cellular Broadband Data Bridge on Juniper Networks SSG Series Secure
Services Gateways.
3G wireless WAN termination using the CX111 Cellular Broadband Data Bridge on Juniper Networks SSG Series Secure
Services Gateways.
Design Considerations
Supported Hardware
• Juniper Networks SSG Series Secure Services Gateways
Software Requirements
• Juniper Networks ScreenOS
®
software versions 5.4.0r16, 6.2.0r6, 6.3.0r3, or later
- There is a Dynamic Host Configuration Protocol (DHCP) memory leak issue with earlier ScreenOS versions when
used with the CX111
• CX111 firmware 1.6.10 or later
Card Compatibility
As of the date of this writing, about 50 different modems (USB and ExpressCard) have been certified to work with
the CX111 Cellular Broadband Data Bridge. The latest list of modems can be found on the CX111 documentation in the
Technical Publications section for CX111 (
the CX111 Cellular Broadband Data Bridge. The latest list of modems can be found on the CX111 documentation in the
Technical Publications section for CX111 (
www.juniper.net/techpubs/hardware/junos-cx/cx111/).
Card Activation
Before cards can be used, they need to be programmed with the subscriber information required to access the service
provider’s network. This is normally referred to as the card activation process. When the service is purchased, the
carrier will request the card’s ESN number, normally found printed on the wireless card. This is then used to identify the
card by the different activation protocols.
provider’s network. This is normally referred to as the card activation process. When the service is purchased, the
carrier will request the card’s ESN number, normally found printed on the wireless card. This is then used to identify the
card by the different activation protocols.
Cards directly purchased from the wireless carrier can ship pre-activated, or sometimes they will ship with a companion
software used to perform the initial activation. In either case, cards already activated do not have to be reactivated.
software used to perform the initial activation. In either case, cards already activated do not have to be reactivated.
Cards can optionally be activated from the CX111. This requires users to log into the bridge’s UI using a Web browser
(details about accessing the UI are discussed in the following sections). The activation process only requires users to
access the activation page and click on the activate button.
(details about accessing the UI are discussed in the following sections). The activation process only requires users to
access the activation page and click on the activate button.