Example: Configuring A Subinterface (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Configuring ScreenOS Devices Guide
Related
Documentation

Example: Configuring a Subinterface (NSM Procedure)

84
For IP address/Netmask, enter 210.1.1.2/24.
Ensure that Manageable is enabled.
Add the VSI interface for redundant2:
14.
In the cluster navigation tree, select Network > Interfaces. Click the Add icon and
select VSI. The General Properties screen appears.
Configure the following options, and then click OK:
15.
For Name, select redundant2, then select 1 (for VSD Group 1).
For IP address/Netmask, enter 10.1.1.2/24.
Ensure that Manageable is enabled.
Click Apply to apply your changes to the cluster and propagate the settings to each
member device.
Configure the Manage IP address for each member device:
16.
In the cluster navigation tree, select Members, and then double-click Device A.
In the device navigation tree, select Network > Interfaces, and then double-click
redundant2. The General Properties screen appears.
For Management IP, enter 10.1.1.21, and then click OK to save your changes.
In the cluster navigation tree, select Members, and then double-click Device B.
In the device navigation tree, select Network > Interfaces, and then double-click
redundant2. The General Properties screen appears.
For Management IP, enter 10.1.1.22, and then click OK to save your changes.
Click OK to save your changes to the cluster.
17.
Setting Interface Properties Using the General Properties Screen on page 53
Interface Network Address Translation Methods on page 62
Configuring Virtual Security Interfaces on page 80
A subinterface, like a physical interface, is a doorway through which traffic enters and
exits a security zone. You can logically divide a physical interface into several virtual
subinterfaces, each of which borrows the bandwidth it needs from the physical interface.
Subinterfaces use names that indicate their physical interface, such as ethernet3/2.1 or
ethernet2.1.
You can create three types of subinterfaces:
None (for ScreenOS 5.0 devices only)—The subinterface does not use VLAN tagging.
Copyright © 2010, Juniper Networks, Inc.