Advanced Network Settings Overview; Configuring Arp Cache Entries; Configuring Vip Options - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual
Configuring screenos devices guide
Hide thumbs
Also See for NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01:
- Manual (340 pages) ,
- Administration manual (1026 pages) ,
- Installation manual (244 pages)
Table of Contents
Advertisement
Configuring ScreenOS Devices Guide
Related
Documentation
Advanced Network Settings Overview
Configuring ARP Cache Entries
Configuring VIP Options
108
NOTE: You do not need to enter an agent name. The security device
automatically generates the agent name using internal information,
such as the ScreenOS version, serial name, and platform.
For Source Interface, select ethernet3.
For Host Name, enter www.my_host.com.
Click OK to save the new DDNS instance, and then click OK to save your changes to
6.
the device.
Example: Configuring DNS Proxy Entries (NSM Procedure) on page 105
Advanced Network Settings Overview on page 108
In the Advanced Network screens, you can configure the following network settings:
Configuring ARP Cache Entries on page 108
Configuring VIP Options on page 108
Configuring DIP Options on page 109
Use the ARP option to manually add entries to the Address Resolution Protocol (ARP)
cache. The ARP cache contains associations of IP addresses to physical machine
addresses known as media access control (MAC) addresses. The ARP normally resolves
unknown IP addresses and updates its cache automatically. You can manually add ARP
cache entries, if necessary, for testing or troubleshooting purposes.
To add an ARP cache entry:
Click the Add icon in the ARP configuration screen.
1.
Specify the IP address, interface, and MAC address for the ARP entry.
2.
Click OK.
3.
For more detailed explanation about configuring ARP entries on security devices, see the
arp commands in the NetScreen CLI Reference Guide.
A virtual IP (VIP) address maps traffic received at one IP address to another address
based on the destination port number in the TCP or UDP segment header. You can only
set a VIP on an interface in the Untrust zone. The IP address for the VIP must be in the
same subnet as an interface in the Untrust zone. (On some security devices, the IP address
for the VIP can be the same address as the Untrust zone interface.) In addition, you need
the following information to define a VIP:
Copyright © 2010, Juniper Networks, Inc.
Advertisement
Table of Contents
