Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual page 264

Configuring ScreenOS Devices Guide
240
Select Use Wildcard Mask if you want the wildcard mask to be sent as part of the
address field instead of the Netmask.
For Wildcard Mask, enter 10.1.1.0.
For Color, select magenta.
For Comment, enter Tokyo Trust Zone.
Add the Paris trust LAN (10.2.2.0/24) as a network address object. In Address Objects,
5.
click the Add icon and select Network. Configure the following settings, and then click
OK:
For Name, enter Paris Trust LAN.
For IP Address/Netmask, enter 10.2.2.0/24.
Select Use Wildcard Mask if you want the wildcard mask to be sent as part of the
address field instead of the Netmask.
For Wildcard Mask, enter 10.2.2.0.
For Color, select magenta.
For Comment, enter Paris Trust Zone.
Configure the Tokyo tunnel interface:
6.
In the NSM navigation tree, select Device Manager > Devices, and then double-click
the Tokyo device to open the device configuration.
In the device navigation tree, select Network > Interface. Click the Add icon and
select Tunnel Interface. The General Properties screen for tunnel.1 appears.
Configure the following settings, and then click OK:
7.
For Zone, select untrust.
For IP Options, select Unnumbered.
For Source Interface, select ethernet3.
Create the Tokyo VPN. In the device navigation tree, select VPN Settings > AutoKey
8.
IKE/Manual VPN.
Select the Manual tab, and then click the Add icon. The Properties screen appears.
9.
Configure the Properties tab as follows:
For Name, enter Tokyo_Paris.
For Gateway, enter 2.2.2.2.
For Local SP, enter 3020.
For Remote SPI, enter 3030.
For Outgoing Interface, select ethernet3.
Copyright © 2010, Juniper Networks, Inc.