Juniper Networks 5000 SERIES Manuel d'utilisation

Page 36

Advertising
background image

Chapter 3 Configuring the Device

28

User’s Guide

For example, to set the IP address and subnet mask of the MGT interface to
10.100.2.183 and 16, respectively:

set interface mgt ip 10.100.2.183/16

3.

To confirm the new port settings, execute the following command:

get interface mgt

Setting the IP Address for the Trust Zone Interface

The NetScreen-5000 Series device usually communicates with your protected network
through an interface bound to the Trust zone. To allow an interface to communicate with
internal devices, you must assign it the IP address and subnet mask for your protected
network.

To set up the ethernet2/2 interface to communicate with your trusted network:

1.

Determine the IP address and subnet mask of your trusted network.

2.

Set the ethernet2/2 interface to the Trust zone by executing the following
command:

set interface ethernet2/2 zone trust

3.

Set the IP address and subnet mask by executing the following command:

set interface ethernet2/2 ip ip_addr/mask

where ip_addr is the IP address and mask is the subnet mask. For example, to
set the IP address and subnet mask of the ethernet2/2 interface to
10.250.2.1/16:

set interface ethernet2/2 ip 10.250.2.1/16

4.

(Optional) To confirm the new port settings, execute the following command:

get interface ethernet2/2

Setting the IP Address for the Untrust Zone Interface

The NetScreen-5000 Series device usually communicates with external (untrusted)
devices through an interface bound to the Untrust zone. To allow an interface to
communicate with external devices, you must assign it a public IP address.

To set up the ethernet2/3 interface to communicate with external devices:

1.

Choose an unused public IP address and subnet mask.

2.

Set the ethernet2/3 interface to the Untrust zone by executing the following
command:

set interface ethernet2/3 zone untrust

Advertising