Default Settings - Juniper NETSCREEN-5GT User Manual

Chapter 3 Configuring the Device
D S
EFAULT ETTINGS
This section describes the default settings and operation of the NetScreen-5GT as it is
shipped from the factory. These default settings are such that, in most cases, there are
only a few items that you must configure. The figure below shows the default
configuration for the NetScreen-5GT.
WebUI and Telnet access to the NetScreen-5GT allowed from any device in the subnetwork.
The NetScreen-5GT
assigns IP addresses to
devices in your network
via DHCP. Addresses are
in the range 192.168.1.33
- 192.168.1.126.
All types of traffic
originated from your
network is allowed to the
Internet, but traffic
originated from the
Internet is not allowed to
your network.
The Untrust interface is bound to the Untrust zone and is configured with the IP address
0.0.0.0/0. To allow the NetScreen-5GT (and the devices on your network) to connect to the
Internet, you must configure the Untrust interface according to information obtained
from your Internet Service Provider (ISP). Refer to
Any user in the subnetwork can manage the NetScreen-5GT if they know the login and
password. To change the default login and password, refer to
Password" on page
workstations, refer to
The Trust interface is bound to the Trust zone and is configured with the subnetwork
address 192.168.1.1/24. This means that all devices in your network that you connect to
the Trust interface must be in the same subnetwork and have IP addresses in that
subnetwork. The NetScreen-5GT is also configured to assign IP addresses for the
192.168.1.1/24 subnetwork to your devices. For more information, refer to
Address" on page
The NetScreen-5GT allows any type of traffic to the Internet that originates from devices
in your network, but does not allow any traffic that originates in the Internet to reach
your network. You can configure additional restrictions; refer to
page 7.
4
Artisan Technology Group - Quality Instrumentation ... Guaranteed | (888) 88-SOURCE | www.artisantg.com
Hub
External Router
5. To restrict management of the NetScreen-5GT to specific
"Restricting Management" on page
6.
Trust Zone
Trust Interface
192.168.1.1/24
Untrust Interface
0.0.0.0/0
Untrust Zone
To Internet
"Untrust Interface Address" on page
"Admin Name and
6.
"Trust Interface
"Additional Policies" on
5.
User's Guide