Juniper Networks ISG 2000 - Manuel (Page 32)

Chapter 3 Configuring the Device
26 User’s Guide
4. Connect an RJ-45 cross-over cable from the far right interface of Module 3
(ethernet3/8) to the internal switch, router, or hub.
5. Connect an optical cable from the upper left interface of Module 1 (ethernet1/1)
to the external router.
6. Connect an optical cable from the DMZ interface at the lower right interface of
Module 2 (ethernet2/2) to the DMZ switch, router, or hub.
7. Flip the ON/OFF switch to the on position.
8. After the NetScreen-ISG 2000 boots up, the Power, Status, and Link LEDs
should light up as follows:
– The Power LED for each deployed power supply glows green.
– The Status LED blinks green.
– The top Link Status LEDs for each interface glows or blinks green. (For
more details about interpreting the Link Status LEDs, see
“Interface
Modules” on page 6 .)
Connecting the NetScreen-ISG 2000 for High
Availability
There are no dedicated High Availability (HA) interfaces on the NetScreen-ISG 2000;
therefore, you must select and configure the HA ports once the system is running. The HA
ports allow you to cable two or more devices together, and configure them to work as a
redundant group. A redundant group consists of a master device and at least one backup
device. If the master device fails, a backup device takes over as the new master, thus
avoiding interruption of services. Any number and type of interfaces, from the four
interface modules, can be used as an HA port.
Set the HA interfaces by executing the following command on each device, for example:
set interface ethernet4/1 zone ha
set interface ethernet4/2 zone ha
Note: Check your router, hub, switch, or computer documentation to see if these
devices require any further configuration for your trust and untrust zones. In
addition, see if it is necessary to switch off the power to any new device you add to
the LAN.
Note: It is recommended that you use mini-GBIC interface modules when possible. Do not
mix mini-GBIC and 10/100 Mbps ports. If you do not have a mini-GBIC interface module,
you should use at least two 10/100 Mbps interfaces. For more information on HA
configuration, see the NetScreen Concepts & Examples ScreenOS Reference Guide.
Note: The NetScreen-ISG 2000 supports a maximum port count of 28. If there are
8-port 10/100 modules in each I/O slot then ports five through eight, in slot 4, are
disabled. Under this circumstance, these ports are unavailable for firewall and HA
functions.