Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual page 125

Copyright © 2010, Juniper Networks, Inc.
In the navigation tree, select Device Manager > Devices. Click the Add icon and select
Cluster. Configure the cluster as follows:
Add the following two cluster members to the cluster: NS-208 A, NS-208 B. Choose
Model when adding each device.
Configure the untrust interface for VSD group 0.
In the cluster navigation tree, select Network > Interface.
Double-click ethernet3 (untrust interface on the NS-208 A). The General Properties
screen appears.
Configure the IP address as 1.1.1.1 and the Netmask as 24. Leave all other settings
as default.
Configure the trust interface for VSD group 0.
2.
Enter the DIP ID.
3.
Add multiple DIP ranges for a particular DIP ID:
4.
Select the Multiple DIP Range check box.
Click the Add icon to display the New MultiRange of DIP dialog box.
Enter the identification range for Rang ID.
For Lower IP, enter the same IP address as the subnet interface IP address.
For Upper IP, enter the same IP address as the subnet interface IP address.
For Start, enter 1.1.1.20.
5.
For End, enter 1.1.1.29.
6.
For Shift From, enter 1.1.1.30.
7.
Select the Fixed Port check box.
8.
NOTE: The Fixed Port is enabled by default while adding multiple DIP
ranges for a DIP ID.
For Extended IP, enter 211.10.1.10.
9.
For Netmask, enter 24.
10.
Select Incoming NAT.
11.
In the cluster navigation tree, select Network > Interface.
12.
Double-click ethernet1 (trust interface on the NS-208 A). The General Properties
13.
screen appears.
Configure the IP address as 10.1.1.1, and the Netmask as 24. Leave all other settings
14.
as default.
Click OK to save your changes.
15.
Chapter 3: Network Settings
101