Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual page 126

Configuring ScreenOS Devices Guide
102
Configure the untrust interface for VSD group 1:
16.
In the cluster navigation tree, select Network > Interface.
Right-click ethernet3 and select New > VSI.
Configure the IP address as 1.1.1.2 and the Netmask as 24. Leave all the default values
17.
for all other settings.
Select NAT > DIP to display the Dynamic IP dialog box. Configure the following options
18.
and click OK:
Enter the DIP ID.
19.
Add multiple DIP ranges for a particular DIP ID:
20.
Select the Multiple DIP Range check box.
Click the Add icon to display the New MultiRange of DIP dialog box.
Enter the identification range for Rang ID.
For Lower IP, enter the same IP address as the subnet interface IP address.
For Upper IP, enter the same IP address as the subnet interface IP address.
For Start, enter 1.1.1.30.
21.
For End, enter 1.1.1.39.
22.
For Shift From, enter 1.1.1.20.
23.
Select the Fixed Port check box.
24.
NOTE: The Fixed Port is enabled by default while adding multiple DIP
range for a DIP ID.
For Extended IP, enter 211.10.1.10.
25.
For Netmask, enter 24.
26.
Select Incoming NAT.
27.
Click OK to save your changes.
28.
Configure the trust interface for VSD group 1.
29.
In the cluster navigation tree, select Network > Interface.
30.
Right-click ethernet1 and select New > VSI.
31.
Configure the IP address as 10.1.1.2, and the Netmask as 24. Leave all other settings
32.
as default.
Click OK to save your changes.
33.
Create the DIP group:
34.
Copyright © 2010, Juniper Networks, Inc.