Binding Interfaces To Zones - Juniper ISG 2000 User Manual

ISG 2000 User's Guide

Binding Interfaces to Zones

8
Security Zones and Interfaces
The ISG 2000 supports different types of interface modules in four interface module
bays. The leftmost interface in the module in the upper left bay is ethernet1/1. The
interface to the right of ethernet1/1 is ethernet1/2. If there are more interfaces in
that module, they are numbered ethernet1/3, ethernet1/4, and so on. As you can
see, the first number represents the position of the interface module in one of the
four bays, and the second number represents the position of the interface in that
module from left to right.
Figure 8: Interface Numbers
Interface Module Bays
1 3
2 4
As you can see in the output from the get interface command below, none of the
interface module interfaces are prebound to a security zone. They are all in the Null
zone.
get interface
A - Active, I - Inactive, U - Up, D - Down, R - Ready
Interfaces in vsys Root:
Name IP Address
mgt 192.168.1.1/24
eth1/1 0.0.0.0/0
eth1/2 0.0.0.0/0
eth1/3 0.0.0.0/0
eth1/4 0.0.0.0/0
eth2/1 0.0.0.0/0
eth2/2 0.0.0.0/0
eth3/1 0.0.0.0/0
eth3/2 0.0.0.0/0
eth4/1 0.0.0.0/0
eth4/2 0.0.0.0/0
eth4/3 0.0.0.0/0
eth4/4 0.0.0.0/0
vlan1 0.0.0.0/0
e1/1 e1/2 e1/3 e1/4
e2/1 e2/2
Zone MAC
MGT 0010.db58.bb80
Null 0010.db58.bb87
Null 0010.db58.bb88
Null 0010.db58.bb89
Null 0010.db58.bb8a
Null 0010.db58.bb9d
Null 0010.db58.bb9e
Null 0010.db58.bb8d
Null 0010.db58.bb8e
Null 0010.db58.bb81
Null 0010.db58.bb82
Null 0010.db58.bb83
Null 0010.db58.bb84
VLAN 0010.db58.bb8f
e3/1 e3/2
e4/1 e4/2 e4/3 e4/4
VLAN State VSD
– D –
– D –
– D –
– D –
– D –
– D –
– D –
– D –
– D –
– D –
– D –
– D –
– D –
1 D –