Layer 2 Vsys Configuration Overview - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Configuring ScreenOS Devices Guide
Related
Documentation

Layer 2 Vsys Configuration Overview

258
Select Subnet.
For IP Address and Netmask, enter 10.1.2.0/24.
Right-click in the IP Classification screen and select New. The New IP Classification
6.
list appears. Configure the following settings, and then click OK:
For Vsys, select vsys3.
Select Subnet.
For IP Address and Netmask, enter 10.1.3.0/24.
In the device navigation tree, select Network >Interfaces
Double-click ethernet 1/1. In the Interface General Properties, configure the following
7.
settings, and then click OK:
For Zone, select internal.
For IP Address and Netmask, enter 10.1.0.1/16.
Double-click ethernet 1/2. In the Interface General Properties, configure the following
8.
settings, and then click OK:
For Zone, select Untrust.
For IP Address and Netmask, enter 210.1.1.1/24.
In the device navigation tree, select Network > Virtual Routers, and then double-click
trust-vr.
In the virtual router navigation tree, select Routing Table.
In the Destination-based Routing Table area, click the Add icon. Configure the following
9.
route, and then click OK:
For IP Address and Netmask, enter 0.0.0.0/0.
For Next Hope, select Gateway.
For Interface, select ethernet1/2.
For Gateway IP Address, enter 210.1.1.250.
Layer 2 Vsys Configuration Overview on page 258
Example: Routing Traffic to Vsys Using VLAN IDs (NSM Procedure) on page 254
Assigning L2V VLAN IDs (NSM Procedure) on page 259
A NetScreen 5000 line of security device running ScreenOS 5.0-L2V supports virtual
systems in Transparent mode (the device functions similar to a Layer 2 switch or bridge).
The device groups packets to or from a unique vsys based on the VLAN tag in the packet
Copyright © 2010, Juniper Networks, Inc.