Juniper SG 20 Hardware Installation And Configuration Manual
  1. Manuals
  2. Brands
  3. Juniper Manuals
  4. Gateway
  5. SG 20
  6. Hardware installation and configuration manual

Juniper SG 20 Hardware Installation And Configuration Manual

Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
Security Products
SSG 20 Hardware Installation and Configuration Guide
Juniper Networks, Inc.
1194 North Mathilda Avenue
Sunnyvale, CA 94089
USA
408-745-2000
www.juniper.net
Part Number: 530-015646-01, Revision 03

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SG 20 and is the answer not in the manual?

Questions and answers

Related Manuals for Juniper SG 20

Summary of Contents for Juniper SG 20

  • Page 1 Security Products SSG 20 Hardware Installation and Configuration Guide Juniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 408-745-2000 www.juniper.net Part Number: 530-015646-01, Revision 03...
  • Page 2 Copyright © 2006 Juniper Networks, Inc. All rights reserved. Juniper Networks and the Juniper Networks logo are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered trademarks, or registered service marks in this document are the property of Juniper Networks or their respective owners.

  • Page 3: Table Of Contents

    Table of Contents About This Guide Organization ....................6 WebUI Conventions ..................6 CLI Conventions....................7 Obtaining Documentation and Technical Support ..........8 Chapter 1 Hardware Overview Port and Power Connectors ................10 Front Panel ....................11 System Status LEDs ................. 11 Port Descriptions ..................
  • Page 4 SSG 20 Hardware Installation and Configuration Guide Using Telnet .................... 30 Default Device Settings .................. 31 Basic Device Configuration ................33 Root Admin Name and Password ............33 Date and Time..................34 Bridge Group Interfaces ................34 Administrative Access ................35 Management Services................

  • Page 5: About This Guide

    About This Guide The Juniper Networks Secure Services Gateway (SSG) 20 device is an integrated router and firewall platform that provides Internet Protocol Security (IPSec) virtual private network (VPN) and firewall services for a branch office or a retail outlet.

  • Page 6: Organization

    SSG 20 Hardware Installation and Configuration Guide Organization This guide contains the following sections: Chapter 1, “Hardware Overview,” describes the chassis and components of an SSG 20 device. Chapter 2, “Installing and Connecting the Device,” describes how to mount an SSG 20 device and how to connect cables and power to the device.

  • Page 7: Cli Conventions

    About This Guide Figure 1: Navigational Path and Configuration Settings CLI Conventions The following conventions are used to present the syntax of CLI commands in examples and in text. In examples: Anything inside square brackets [ ] is optional. Anything inside braces { } is required. If there is more than one choice, each choice is separated by a pipe ( | ).

  • Page 8: Obtaining Documentation And Technical Support

    SSG 20 Hardware Installation and Configuration Guide Obtaining Documentation and Technical Support To obtain technical documentation for any Juniper Networks product, visit www.juniper.net/techpubs/. For technical support, open a support case using the Case Manager link at http://www.juniper.net/support/ or call 1-888-314-JTAC (within the United States) or 1-408-745-9500 (outside the United States).

  • Page 9: Hardware Overview

    Chapter 1 Hardware Overview This chapter provides detailed descriptions of the SSG 20 chassis and its components. It contains the following sections: “Port and Power Connectors” on page 10 “Front Panel” on page 11 “Back Panel” on page 16...

  • Page 10: Port And Power Connectors

    SSG 20 Hardware Installation and Configuration Guide Port and Power Connectors This section describes and displays the location of the built-in ports and power connectors. Refer to the following figure for built-in port locations and Table 1 for the power connector descriptions. Figure 2: Built-in Port and Mini-PIM Location Mini-PIM 1 Mini-PIM 2...

  • Page 11: Front Panel

    Front Panel This section describes the following elements on the front panel of an SSG 20 device: System Status LEDs Port Descriptions Mini Physical Interface Module Port Descriptions System Status LEDs The system status LEDs display information about critical device functions. Figure 3 illustrates the position of each status LED on the front of the SSG 20-WLAN device.
  • Page 12 SSG 20 Hardware Installation and Configuration Guide Name Color Status Description PIM 2 Green On steadily Indicates that the mini PIM is functioning. Blinking Indicates that the mini PIM is passing traffic. Indicates that the mini PIM is not operational. WLAN (On WLAN device only) 802.11a Green...

  • Page 13: Port Descriptions

    Port Descriptions This section explains the purpose and function of the following: Ethernet Ports Console Port AUX Port Ethernet Ports Five 10/100 Ethernet ports provide LAN connections to hubs, switches, local servers, and workstations. You can also designate an Ethernet port for management traffic. The ports are labeled 0/0 through 0/4.

  • Page 14: Aux Port

    SSG 20 Hardware Installation and Configuration Guide AUX Port The auxiliary (AUX) port is an RJ-45 serial port wired as data terminal equipment (DTE) that can be connected to a modem to allow remote administration. We do not recommend using this port for regular remote administration. The AUX port is typically assigned to be the backup serial interface.
  • Page 15 Table 4: Mini PIM LED States on the SSG 20 Type Name Color State Description ADSL 2/2+ SYNC Green On steadily Indicates that the ADSL interface is trained (Annex A Blinking Indicates training is in progress and B) Indicates that the interface is idle TX/RX Green Blinking...

  • Page 16: Back Panel

    SSG 20 Hardware Installation and Configuration Guide Back Panel This section describes the following elements on the back panel of an SSG 20 device: Power Adapter Radio Transceivers Grounding Lug Antennae Types USB Port Figure 6: Back Panel of an SSG 20-WLAN Device Antenna B Antenna A Device...

  • Page 17: Grounding Lug

    Grounding Lug A one-hole grounding lug is provided on the rear of the chassis to connect the device to earth ground (see Figure 6). To ground the device before connecting power, connect a grounding cable to earth ground and then attach the cable to the lug on the rear of the chassis. Back Panel...

  • Page 18: Antennae Types

    SSG 20 Hardware Installation and Configuration Guide Antennae Types The SSG 20-WLAN device supports three types of custom-built radio antennae: Diversity antennae — The diversity antennae provide 2dBi directional coverage and a fairly uniform level of signal strength within the area of coverage and are suitable for most installations.

  • Page 19: Installing And Connecting The Device

    “Connecting the Power” on page 22 “Connecting a Device to a Network” on page 23 For safety warnings and instructions, refer to the Juniper Networks Security NOTE: Products Safety Guide. Before working on any equipment, you should be aware of the hazards involved with electrical circuitry and be familiar with standard practices for preventing accidents.

  • Page 20: Before You Begin

    SSG 20 Hardware Installation and Configuration Guide Before You Begin The location of the chassis, the layout of the mounting equipment, and the security of your wiring room are crucial for proper system operation. WARNING: To prevent abuse and intrusion by unauthorized personnel, install the SSG 20 device in a secure environment.
  • Page 21 To front-mount an SSG 20 device onto a standard 19-inch equipment rack, perform the following steps: Figure 7: SSG 20 Front-mount Power Supply 1. Align the power supply rack-mount ear to the left-front edge of the device. 2. Place the screws in the holes and use a phillips screwdriver to secure them. 3.

  • Page 22: Connecting Interface Cables To A Device

    SSG 20 Hardware Installation and Configuration Guide To desk-mount an SSG 20 device, perform the following steps: Figure 9: SSG 20 Desk-mount 1. Attach the desktop stand to the side of the device. We recommend using the side closest to the power adapter. 2.

  • Page 23: Connecting A Device To A Network

    Connecting a Device to a Network An SSG 20 device provides firewall and general security for networks when it is placed between internal networks and the untrusted network. This section describes the following: Connecting a Device to an Untrusted Network Connecting a Device to an Internal Network or a Workstation Connecting a Device to an Untrusted Network You can connect your SSG 20 device to an untrusted network in one of the following...

  • Page 24: Ethernet Ports

    SSG 20 Hardware Installation and Configuration Guide Ethernet Ports To establish a high-speed connection, connect the provided Ethernet cable from the Ethernet port marked 0/0 on an SSG 20 device to the external router. The device autosenses the correct speed, duplex, and MDI/MDIX settings. Serial (AUX/Console) Ports You can connect to the untrusted network with an RJ-45 straight-through serial cable and an external modem.

  • Page 25: Isdn, T1, E1, And V.92 Mini Pims

    Figure 11: Microfilter and Splitter on Your Network Connection DATA VOICE ADSL ADSL 2 /2 + SYNC SYNC TX RX TX/RX TX/RX LI NK SSG 20 POWER PI M 1 802.11a STATUS PI M 2 WLAN CONSOL E 0 /0 10/100 0 /1 10 / 1 00...

  • Page 26: Wireless Antennae

    SSG 20 Hardware Installation and Configuration Guide Wireless Antennae If you are using the wireless interface, you need to connect the provided antennae on the device. If you have the standard 2dB diversity antennae, use screws to attach them onto the posts marked A and B at the back of the device. Bend each antenna at its elbows, making sure not to put pressure on the bulkhead connectors.

  • Page 27: Configuring The Device

    NOTE: After you configure a device and verify connectivity through the remote network, you must register your product at www.juniper.net/support/ so certain ScreenOS services, such as Deep Inspection Signature Service and Antivirus (purchased separately), can be activated on the device. After registering your product, use the WebUI to obtain the subscription for the service.

  • Page 28: Accessing A Device

    NetScreen-Security Manager: NetScreen-Security Manager is a Juniper Networks enterprise-level management application that enables you to control and manage Juniper Networks firewall/IPSec VPN devices. For instructions on how to manage your device with NetScreen-Security Manager, refer to the NetScreen-Security Manager Administrator’s Guide.

  • Page 29: Using The Webui

    3. Launch a serial terminal-emulation program on your workstation. The required settings to launch a console session are as follows: Baud rate: 9600 Parity: None Data bits: 8 Stop bit: 1 Flow Control: None 4. If you have not yet changed the default login for the admin name and password, enter netscreen at both the login and password prompts.

  • Page 30: Using Telnet

    SSG 20 Hardware Installation and Configuration Guide Figure 14: WebUI Login Prompt 4. If you have not yet changed the default login for the admin name and password, enter netscreen at both the admin name and password prompts. (Use lowercase letters only. The login and password fields are both case-sensitive.) Using Telnet To establish a Telnet connection, perform the following steps:...

  • Page 31: Default Device Settings

    Default Device Settings This section describes the default settings and operation of an SSG 20 device. Table 5 shows the default zone bindings for ports on the devices. Table 5: Default Physical Interface to Zone Bindings Port Label Interface Zone 10/100 Ethernet ports: ethernet0/0 Untrust...
  • Page 32 SSG 20 Hardware Installation and Configuration Guide To unset ethernet0/3 from bgroup0 and assign it to the Trust zone with a static IP address of 192.168.3.1/24, use the WebUI or CLI as follows: WebUI Network > Interfaces > List > Edit (bgroup0) > Bind Port: deselect ethernet0/3, then click Apply.

  • Page 33: Basic Device Configuration

    Basic Device Configuration This section describes the following basic configuration settings: Root Admin Name and Password Date and Time Bridge Group Interfaces Administrative Access Management Services Hostname and Domain Name Default Route Management Interface Address Backup Untrust Interface Configuration Root Admin Name and Password The root admin user has complete privileges for configuring an SSG 20 device.

  • Page 34: Date And Time

    SSG 20 Hardware Installation and Configuration Guide Date and Time The time set on an SSG 20 device affects events such as the setup of VPN tunnels. The easiest way to set the date and time on the device is to use the WebUI to synchronize the device system clock with the workstation clock.

  • Page 35: Administrative Access

    unset interface bgroup0 port ethernet0/3 unset interface bgroup0 port ethernet0/4 set interface bgroup1 port ethernet0/3 set interface bgroup1 port ethernet0/4 set interface bgroup1 port wireless0/2 set interface bgroup1 zone DMZ set interface bgroup1 ip 10.0.0.1/24 save Administrative Access By default, anyone in your network can manage a device if they know the login and password.

  • Page 36: Hostname And Domain Name

    SSG 20 Hardware Installation and Configuration Guide Hostname and Domain Name The domain name defines the network or subnetwork that the device belongs to, while the hostname refers to a specific device. The hostname and domain name together uniquely identify the device in the network. To configure the hostname and domain name on a device, use the WebUI or CLI as follows: WebUI...

  • Page 37: Backup Untrust Interface Configuration

    Backup Untrust Interface Configuration The SSG 20 device allows you to configure a backup interface for untrust failover. To set a backup interface for untrust failover, perform the following steps: 1. Set the backup interface in the Null security zone with the unset interface interface [port interface] CLI command.
  • Page 38 SSG 20 Hardware Installation and Configuration Guide Once you have set an SSID to the wireless0/0 interface, you can access the device using the default wireless0/0 interface IP address in the steps described in “Accessing a Device” on page 28. Figure 15 shows the default configuration for the SSG 20-WLAN device.
  • Page 39 Table 7: Wireless Authentication and Encryption Options Authentication Encryption Open Allows any wireless client to access the device Shared-key WEP shared-key WPA-PSK AES/TKIP with pre-shared key AES/TKIP with key from RADIUS server WPA2-PSK 802.11i compliant with a pre-shared key WPA2 802.11i compliant with a RADIUS server WPA-Auto-PSK Allows WPA and WPA2 type with pre-shared key...
  • Page 40 SSG 20 Hardware Installation and Configuration Guide 5. Activate wireless changes. Wireless > General Settings > Click Activate Changes. 1. Set the WLAN country code and IP address. set wlan country-code {code_id} set interface wireless_interface ip ip_addr/netmask 2. Set the SSID. set ssid name name_str set ssid name_str authentication auth_type encryption encryption_type set ssid name_str interface interface...

  • Page 41: Mini Pim Configuration

    Mini PIM Configuration This section explains how to configure the mini physical interface modules (PIMs): ADSL2/2+ Interface ISDN Interface T1 Interface E1 Interface V.92 Modem Interface ADSL2/2+ Interface Your network uses the ADSL2/2+ interface adslx/0, with x representing the mini PIM slot (1 or 2), on the device to connect to the service provider’s network through an Asynchronous Transfer Mode (ATM) virtual circuit.

  • Page 42: Virtual Circuits

    SSG 20 Hardware Installation and Configuration Guide Virtual Circuits To add virtual circuits, you create subinterfaces to the ADSL2/2+ interface. You can create up to 10 ADSL2/2+ subinterfaces. For example, to create a new subinterface named adsl1/0.1 bound to the predefined zone named Untrust, use the WebUI or CLI as follows: WebUI Network >...

  • Page 43: Pppoe Or Pppoa

    WebUI Network > Interfaces > List > Edit (for the adsl1/0 interface): Enter the following, then click Apply: VPI/VCI: 1 / 32 Multiplexing Method: LLC (selected) set interface adsl1/0 pvc 1 32 mux llc save PPPoE or PPPoA An SSG 20 device includes both PPPoE and PPPoA clients to connect to the service provider’s network over the ADSL link.

  • Page 44: Static Ip Address And Netmask

    SSG 20 Hardware Installation and Configuration Guide Static IP Address and Netmask If your service gave you a specific, fixed IP address and netmask for your network, then configure the IP address and netmask for the network and the IP address of the router port connected to the device.

  • Page 45: Isdn Interface

    set interface bgroup0 dhcp server option dns1 1.1.1.152 save For more information about configuring the ADSL and ADSL2/2+ interfaces, refer to the Concepts & Examples ScreenOS Reference Guide. ISDN Interface Integrated Services Digital Network (ISDN) is a set of standards for digital transmission over different media created by the Consultative Committee for International Telegraphy and Telephone (CCITT) and International Telecommunications Union (ITU).

  • Page 46: E1 Interface

    SSG 20 Hardware Installation and Configuration Guide AT&T Pub 54014 ITU G.751, G.703 To configure the T1 mini PIM, use the WebUI or CLI as follows: WebUI Network > Interfaces > List > Edit (serial1/0): Enter or select the following, then click OK: WAN Configure: main link WAN Encapsulation: cisco-hdlc...

  • Page 47: Modem Interface

    Init String: AT&FS7=255S32=6 Active Modem setting Inactivity Timeout: 20 set interface serial1/0 zone untrust set interface serial1/0 modem isp isp_juniper account login juniper password juniper set interface serial1/0 modem isp isp_juniper primary-number 1234567 set interface serial1/0 modem idle-time 20 set interface serial1/0 modem settings mod1 init-strings AT&FS7=255S32=6 set interface serial1/0 modem settings mod1 active For information on how to configure the V.92 modem interface, refer to the...

  • Page 48: Basic Firewall Protections

    ScreenOS, refer to the Concepts & Examples ScreenOS Reference Guide. Verifying External Connectivity To verify that workstations in your network can access resources on the Internet, start a browser from any workstation in the network and enter the following URL: www.juniper.net. Basic Firewall Protections...

  • Page 49: Resetting A Device To Factory Defaults

    Resetting a Device to Factory Defaults If you lose the admin password, you can reset the device to its default settings. This action destroys any existing configurations but restores access to the device. WARNING: Resetting the device deletes all existing configuration settings and disables all existing firewall and VPN services.
  • Page 50 SSG 20 Hardware Installation and Configuration Guide Resetting a Device to Factory Defaults...

  • Page 51: Chapter 4 Servicing The Device

    “Required Tools and Parts” on this page “Replacing a Mini-Physical Interface Module” on this page “Upgrading Memory” on page 54 For safety warnings and instructions, refer to the Juniper Networks Security NOTE: Products Safety Guide. The instructions in the guide warn you about situations that could cause bodily injury.

  • Page 52: Removing A Blank Faceplate

    SSG 20 Hardware Installation and Configuration Guide Removing a Blank Faceplate To maintain proper airflow through the SSG 20 device, blank faceplates should remain over slots that do not contain mini PIMs. Do not remove a blank faceplate unless you are installing a mini PIM in its empty slot. To remove a blank faceplate, perform the following steps: 1.

  • Page 53: Installing A Mini Pim

    8. Grasp the screws on each side of the mini PIM faceplate and slide the mini PIM out of the device. Place the mini PIM in the electrostatic bag or on the antistatic mat. Figure 16: Removing a Mini PIM 9.

  • Page 54: Upgrading Memory

    SSG 20 Hardware Installation and Configuration Guide 6. If necessary, arrange the cables to prevent them from dislodging or developing stress points: a. Secure the cables so that they are not supporting their own weight as they hang to the floor. b.
  • Page 55 6. Release the 128 MB DIMM DRAM by pressing your thumbs outward on the locking tabs on each side of the module so that the tabs move away from the module. Figure 19: Unlocking the Memory Module 7. Grip the long edge of the memory module and slide it out. Set it aside. Figure 20: Removing Module Slots 8.
  • Page 56 SSG 20 Hardware Installation and Configuration Guide 9. Place the memory-card cover over the slot. 10. Use the phillips screwdriver to tighten the screws, securing the cover to the device. Upgrading Memory...

  • Page 57: Appendix A Specifications

    Appendix A Specifications This appendix provides general system specifications for an SSG 20 device. It contains the following sections: “Physical” on page 58 “Electrical” on page 58 “Environmental Tolerance” on page 58 “Certifications” on page 59 “Connectors” on page 60...

  • Page 58: Physical

    SSG 20 Hardware Installation and Configuration Guide Physical Table 8: SSG 20 Physical Specifications Description Value Chassis 294 mm x 194.8 mm x 44 mm (11.5 inches x 7.7 inches x 2 inches) dimensions Device weight 1.53 kg (3.3 lbs) without PIMs installed ISDN PIM ADSL Annex A PIM 106g ADSL Annex B PIM 106g...

  • Page 59: Certifications

    Certifications Safety CAN/CSA-C22.2 No. 60950-1-03/UL 60950-1 Safety of Information Technology Equipment EN 60950-1 (2000) Third Edition Safety of Information Technology Equipment IEC 60950-1 (1999) Third Edition Safety of Information Technology Equipment EMC Emissions FCC Part 15 Class B (USA) EN 55022 Class B (Europe) AS 3548 Class B (Australia) VCCI Class B (Japan) EMC Immunity...

  • Page 60: T1 Interface

    SSG 20 Hardware Installation and Configuration Guide T1 Interface FCC Part 68 - TIA 968 Industry Canada CS-03 UL 60950-1 Applicable requirements for TNV circuit with outside plant lead connection Connectors Figure 22 shows the location of the pins on the RJ-45 connector. Figure 22: RJ-45 Pinouts 1 2 3 4 5 6 7 8 Table 11 lists the RJ-45 connector pinouts.
  • Page 61 Figure 23 shows the location of the pins on the DB-9 female connector. Figure 23: DB-9 Female Connector Table 12 provides the DB-9 connector pinouts. Table 12: DB-9 Connector Pinouts Name Description Carrier Detect Receive Data Transmit Data Data Terminal Ready Signal Ground Data Set Ready Request To Send...
  • Page 62 SSG 20 Hardware Installation and Configuration Guide Connectors...

  • Page 63: Appendix B Initial Configuration Wizard

    Appendix B Initial Configuration Wizard This appendix provides detailed information about the Initial Configuration Wizard (ICW) for an SSG 20 device. After you have physically connected your device to the network, you can use the ICW to configure the interfaces that are installed on your device. This section describes the following ICW windows: Rapid Deployment Window on page 64 Administrator Login Window on page 64...

  • Page 64: Rapid Deployment Window

    SSG 20 Hardware Installation and Configuration Guide 1. Rapid Deployment Window Figure 24: Rapid Deployment Window If your network uses NetScreen-Security Manager (NSM), you can use a Rapid Deployment configlet to automatically configure the device. Obtain a configlet from your NSM administrator, select Yes, select Load Configlet from:, browse to the file location, then click Next.

  • Page 65: Wlan Access Point Window

    3. WLAN Access Point Window If you are using the device in the WORLD or ETSI regulatory domain, you must choose a country code. Select the appropriate options, then click Next. Figure 26: Wireless Access Point Country Code Window 4. Physical Interface Window On the interface-to-zone bindings screen, you set the interface to which you want to bind the Untrust security zone.

  • Page 66: Adsl2/2+ Interface Window

    SSG 20 Hardware Installation and Configuration Guide 5. ADSL2/2+ Interface Window If you have the ADSL2/2+ mini PIM installed in your device, you can configure the adslx/0 interface using the following window. NOTE: If you have two ADSL2/2+ mini-PIMs installed on your device, you cannot configure the Multi-link feature with the ICW.
  • Page 67 Table 13: Fields in ADSL Interface Configuration Window Field Description Information from Service Provider: VPI/VCI VPI/VCI values to identify the permanent virtual circuit. Multiplexing Method ATM multiplexing method (LLC is the default). RFC1483 Protocol Mode Protocol mode setting (Bridged is the default). Operating Mode Operating mode for the physical line (Auto is the default).

  • Page 68: T1 Interface Windows

    SSG 20 Hardware Installation and Configuration Guide 6. T1 Interface Windows If you have the T1 mini-PIM installed in your device and you selected the Frame Relay option, the following windows are displayed: T1 Physical Layer Tab Window T1 Frame Relay Tab Window NOTE: If you have two T1 mini-PIMs installed on your device and you select the Multi-link option, you will see two Physical Layer tabs.
  • Page 69 Table 14: Fields in T1 Physical Layer Tab Window Field Description Clocking Sets the transmit clock on the interface. Line Buildout Sets the distance at which an interface drives a line. Default setting is 0 - 132 feet. Line Encoding Sets the line encoding format on the interface: Auto Mark Inversion 8-bits zero suppression...
  • Page 70 SSG 20 Hardware Installation and Configuration Guide Figure 30: T1 Frame Relay Tab Window Table 15: Fields in T1 Frame Relay Tab Window Field Description No-Keepalive checkbox Enables no-keepalives. Type Sets the frame relay LMI type: ANSI: American National Standards Institute supports data rates up to 8Mbps downstream and 1Mbps upstream.
  • Page 71 If you have the T1 mini-PIM installed in your device and you selected the PPP option, the following additional windows are displayed: PPP Option with PPP Tab Window PPP Option with Peer User Tab Window Figure 31: PPP Option with PPP Tab Window Table 16: Fields in PPP Option with PPP Tab Window Field Description...
  • Page 72 SSG 20 Hardware Installation and Configuration Guide Figure 32: PPP Option with Peer User Tab Window Table 17: Fields in PPP Option with Peer User Tab Window Field Description Peer User Sets the name of the peer user Password Sets the password for the peer user specified in the Peer User text field Status Enables or disables PPP If you have the T1 mini-PIM installed in your device and you selected the Cisco...

  • Page 73: E1 Interface Windows

    Table 18: Fields in Cisco HDLC Option with Cisco HDLC Tab Window Field Description Interface IP Sets the IP address for the T1 Cisco HDLC interface Netmask Sets the netmask for the T1 Cisco HDLC interface Gateway Sets the gateway address for the T1 Cisco HDLC interface 7.
  • Page 74 SSG 20 Hardware Installation and Configuration Guide Table 19: Fields in E1 Physical Layer Tab Window Field Description Clocking Sets the transmit clock on the interface. Frame Checksum Sets the size of checksum. Default is 16. Framing Mode Sets the framing format. Default is without CRC4. Idle Cycles Flag Sets the value that the interface transmits during idle cycles.

  • Page 75: Isdn Interface Windows

    Field Description Interface IP Sets the IP address for the subinterface Netmask Sets the netmask for the subinterface Gateway Sets the gateway address for the subinterface To configure the E1 interface with PPP options, see “PPP Option with PPP Tab Window”...
  • Page 76 SSG 20 Hardware Installation and Configuration Guide Table 21: Fields in ISDN Physical Layer Tab Window Field Description Switch Type Sets the service provider switch type: att5e: At&T 5ESS ntdms100: Nortel DMS 100 ins-net: NTT INS-Net etsi: European variants ni1: National ISDN-1 SPID1 Service Provider ID, usually a seven-digit telephone number with some optional numbers.
  • Page 77 Figure 37: ISDN Connection Tab Window Table 22: Fields in ISDN Connection Tab Window Field Description PPP Profile Name Sets a PPP profile name to the ISDN interface. Authentication Sets the PPP authentication type: CHAP: Challenge Handshake Authentication Protocol PAP: Password Authentication Protocol None Local User Sets the local user.

  • Page 78: Modem Interface Window

    SSG 20 Hardware Installation and Configuration Guide Field Description Dialer Pool (Dialer only) Sets the dialer pool name for the dialer interface. Netmask Sets the netmask. Gateway Sets the gateway address. 9. V.92 Modem Interface Window If you have the V.92 mini-PIM installed in your device, you can configure the serialx/0 (Modem) interface using the following window: Figure 38: Modem Interface Window Table 23: Fields in Modem Interface Window...

  • Page 79: Eth0/1 Interface (Dmz Zone) Window

    Figure 39: Eth0/0 Interface Window Table 24: Fields in Eth0/0 Interface Window Field Description Dynamic IP via DHCP Enables the device to receive an IP address for the Untrust zone interface from a service provider. Dynamic IP via PPPoE Enables the device to act as a PPPoE client, receiving an IP address for the Untrust zone interface from a service provider.

  • Page 80: Bgroup0 Interface (Trust Zone) Window

    SSG 20 Hardware Installation and Configuration Guide Figure 40: Eth0/1 Interface Window Table 25: Fields in Eth0/1 Interface Window Field Description Dynamic IP via DHCP Enables the device to receive an IP address for the DMZ interface from a service provider. Static IP Assigns a unique and fixed IP address to the DMZ interface.

  • Page 81: Wireless0/0 Interface (Trust Zone) Window

    Table 26: Fields in Bgroup0 Interface Window Field Description Dynamic IP via DHCP Enables the device to receive an IP address for the Trust zone interface from a service provider. Static IP Assigns a unique and fixed IP address to the Trust zone interface. Enter the Trust zone interface IP address and netmask.

  • Page 82: Interface Summary Window

    SSG 20 Hardware Installation and Configuration Guide Table 27: Fields in Wireless0/0 Interface Window Field Description Wlan Mode Sets the WLAN radio mode: 5G (802.11a). 2.4G (802.11b/g). Both (802.11a/b/g). SSID Sets the SSID name. Authentication and Encryption Sets the WLAN interface authentication and encryption: Open authentication, the default, allows anyone to access the device.

  • Page 83: Physical Ethernet Dhcp Interface Window

    Check your interface configuration, then click Next when ready to proceed. The Physical Ethernet DHCP Interface window appears. 15. Physical Ethernet DHCP Interface Window Select Yes to enable your device to assign IP addresses to your wired network via DHCP. Enter the IP address range that you want your device to assign to clients using your network, then click Next.

  • Page 84: Confirmation Window

    SSG 20 Hardware Installation and Configuration Guide 17. Confirmation Window Confirm your device configuration and change as needed. Click Next to save, reboot the device, and run the configuration. Figure 46: Confirmation Window After the device reboots with the saved system configuration, the WebUI login prompt appears.

  • Page 85: Index

    Index wireless authentication and encryption ....38 connection, basic network AAL5 multiplexing ...........23 ............41 ADSL configuring interface ..........41 connecting the cable ..........24 default ip addresses ............32 connecting the port ..........24 Annex A ................24 Annex B ................24 ISP IP address and netmask .........44 antennae .................26...
  • Page 86 SSG 20 Hardware Installation and Configuration Guide static IP address ............. 41 Untrust zone, configuring backup interface ....37 Virtual Path Identifier/Virtual Channel Identifier See VPI/VCI VPI/VCI configuring ............... 42 values ................ 41 wireless antennae ..............26 using the default interface ........

This manual is also suitable for:

Ssg 20-wlan

Table of Contents