Juniper NetScreen-5GT Getting Started Manual page 3

Step 5
Port modes bind physical ports, logical interfaces, and zones.
Trust-Untrust mode, the default, binds the Trusted Ethernet and
•
wireless2 interfaces to the Trust zone and the ADSL interface to
the Untrust zone.
• Home-Work mode binds interfaces to the Untrust, Home, and
Work zones.
Note: The Extended mode is only available with the Extended
version of the NetScreen-5GT Wireless ADSL device. You must use
the WebUI or CLI to configure this port mode.
The ADSL interface is the default interface to the Untrust zone. If you
do not want to use the ADSL interface, uncheck the box. If you want
to configure the default wireless2 interface for the wireless Trust
zone, check the box. Click Next.
Note: The remaining steps in this guide show the screens for the
default Trust-Untrust port mode with the ADSL interface as the default
Untrust zone interface and wireless2 interface as the default wireless
Trust zone interface. If you selected different options, you may see
different screens.
Step 6
Enter the following information from your service provider:
VPI/VCI values to identify the permanent virtual circuit.
•
ATM multiplexing method (LLC is the default).
•
Protocol Mode settings.
•
• Operating mode for the physical line (auto is the default).
If you do not know what these settings are, please refer to the
Common Settings for Service Providers document that came with the
NetScreen device.
*See http://www.juniper.net/products/integrated/5GT-ADSL/
Note: (Annex B model only) Select Deutsche Telekom to connect to a
Deutsch Telecom ADSL line; otherwise select non-Deutsche Telekom.
Select Dynamic IP via DHCP to enable the NetScreen device to
receive an IP address for the Untrust zone interface from a DHCP
server.
Select Dynamic IP via PPPoA to enable the NetScreen device to act
as a PPPoA client. Enter the Username and Password assigned by
the service provider.
Select Dynamic IP via PPPoE to enable the NetScreen device to act
as a PPPoE client. Enter the Username and Password assigned by the
service provider.
(Optional) Select Static IP to assign a unique and fixed IP address to
the ADSL interface. Enter the interface IP address, Netmask, and
Gateway (the gateway address is the IP address of the router port
connected to the NetScreen device).
Click Next.
Step 7
Note: If you are configuring a NetScreen device that has the
Regulatory Domain WORLD setting, you must set the country code. If
you are configuring a NetScreen device that has the Regulatory
Domain FCC or TELEC setting, the country code is preset and cannot
be changed.
You must set a Service Set Identifier (SSID) before the wireless2
interface can be activated.
• Open authentication, the default, allows anyone to access the
device. There is no encryption for this authentication option.
• WPA Pre-Shared Key authentication sets the Pre-Shared Key
(PSK) or passphrase that must be entered when accessing
wireless connectivity. You can choose to enter a HEX or ASCII
value for the PSK. A HEX PSK must be a 256-bit (64 text
character) HEX value. An ASCII passphrase must be 8 to 63 text
*
characters. You must select Temporal Key Integrity Protocol
(TKIP) or Advanced Encryption Standard (AES) encryption type
for this option, or select Auto to allow either option.
WPA permits authentication with an external RADIUS server.
•
Enter the RADIUS server IP address, the port number to which
the NetScreen device sends authentication requests, and the
shared secret (password) between the NetScreen device and the
RADIUS server. You must select TKIP or AES encryption type for
this option, or select Auto to allow either option.
Getting Started Guide