Juniper NetScreen-5GT Getting Started Manual page 4

Getting Started Guide
The options presented are the most common ways to secure a
wireless network. For information about all the security options, see
the NetScreen Wireless Reference Guide. To use a security method
that is not listed here, complete the ICW and then use the WebUI or
CLI to configure it.
To change the IP address of the wireless2 interface, enter a new IP
address and netmask. The default is 192.168.2.1/24.
Step 8
To change the IP address of the Trusted Ethernet interface, enter a
new IP address and netmask. If you change the IP address and
netmask of the Trust interface, your workstation and the Trust
interface of the NetScreen device might be on different subnetworks.
Click Next.
Note: If you selected the Home-Work mode in step 5, you are
prompted to provide the IP addresses and netmasks for the Home
and Work zone interfaces instead of the Trusted Ethernet interface.
You also have the option of choosing to receive an address via
DHCP.
Step 9
You can choose to have the NetScreen device assign IP addresses to
wired and wireless hosts in your network.
BASIC SECURITY AND POLICY ADMINISTRATION
You must register your product at www.juniper.net/support/ to activate certain
ScreenOS services, such as the Deep Inspection Signature Service. After registering,
use the WebUI or CLI to obtain the subscription for the service.
Step 1
Using Policy Wizards. By default, the NetScreen device permits
workstations in your network to start sessions with outside
workstations, while outside workstations cannot start sessions with
your workstations. You can set up policies that tell the device what
kinds of sessions to restrict or permit.
To set up a policy to either restrict the kinds of traffic that can be
initiated from inside your network to go out to the Internet, or to
permit certain kinds of traffic that can be initiated from outside
workstations to your network, use the WebUI Policy Wizard. In the
WebUI menu column, click Wizards > Policy. Follow the directions
in the Wizard to configure a policy.
You can use the Wizards only when the device is in the default Trust-
Untrust port mode. For details on setting up policies, see the
NetScreen Concepts & Examples ScreenOS Reference Guide.
Copyright © 2005 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, NetScreen, NetScreen Technologies, GigaScreen, NetScreen-Global PRO,
NetScreen-Remote, NetScreen ScreenOS and the NetScreen logo are trademarks and registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other
trademarks and registered trademarks are the property of their respective companies. Information in this document is subject to change without notice. No part of this document may
be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without receiving written permission from Juniper Networks, Inc.
• Select Yes if the NetScreen device is to act as a DHCP server
and assign dynamic IP addresses to hosts in the Trust zone.
Enter a range for the assigned IP addresses or enter the
address(es) of the DNS server(s). If you specify an IP address
range that is in a different subnetwork than the Trust
subnetwork, your workstation and the Trust zone interface of
the NetScreen device might be in different subnetworks. To
manage the NetScreen device using the WebUI, ensure that
your workstation and the NetScreen interface are in the same
subnetwork.
• Select No if you do not want the NetScreen device to assign IP
addresses to hosts in the Trust zone.
Click Next.
Step 10
• Click Previous to modify configuration information.
• Click Next to enter the configuration.
The NetScreen device reboots after clicking Next.
Step 11
Click Finish in the final window and close the web browser.
Relaunch the web browser and enter one of the Trust or Work zone
interface IP addresses in the URL address field. (Your workstation
and the NetScreen interface must be in the same subnetwork.)
Step 2
Using Protection Options. The firewall attack protection (SCREEN)
menu enables you to tailor detection and threshold levels for a range
of potential attacks.
a. In the WebUI menu column, click Screening > Screen.
b. Select the zone for which you want to configure firewall
attack protection.
c. Select the appropriate protection options, and click Apply.
Remember these features must be configured on each zone
where they are required.
Step 3
Verifying Access. To verify that workstations in your network can
access resources on the Internet, start a Web browser from any
workstation in the network and enter the URL: www.juniper.net.
P/N 093-1573-000 Rev. A