Configuring Zones And Zone Properties In Screenos Devices Overview - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual

Configuring Zones and Zone Properties in ScreenOS Devices Overview

Copyright © 2010, Juniper Networks, Inc.
Example: Configuring NetScreen5GT Devices to Permit Internal Hosts (NSM
Procedure) on page 93
Example: Configuring NetScreen5GT Devices to Connect to the Web Using the PPPoA
and ADSL Interfaces (NSM Procedure) on page 94
Example: Configuring NetScreen5GT Devices as a Firewall Using the PPPoE and ADSL
Interfaces (NSM Procedure) on page 96
Wireless Interface on ScreenOS Devices Overview on page 99
Configuring DSCP Options Overview on page 99
Example: Configuring DIP Groups (NSM Procedure) on page 100
DNS Server Configuration Using DNS Settings on page 103
Example: Configuring DNS Proxy Entries (NSM Procedure) on page 105
Example: Configuring DDNS Settings (NSM Procedure) on page 106
Advanced Network Settings Overview on page 108
The Zone screen is where you can configure predefined zones or create user-defined
security zones. You can also create a tunnel zone, which is a logical segment to which a
VPN tunnel interface is bound.
A security device supports two types of zones:
Security zone—A Layer 3 security zone binds to NAT or Route mode interfaces; a Layer
2 security zone binds to Transparent mode interfaces.
NOTE: When you add a device and configure it to operate in Transparent
mode, the L2 zone names appear in the NSM UI without the " V1-" prefix.
When you update the configuration on the device from the UI, the correct
L2 zone names are configured.
Tunnel zone—A zone that binds to a carrier zone.
To add a zone to a security device, in the device navigation tree, select Network > Zone
and add the desired zone. For Security Zones, you might define the name of the zone and
the virtual router in which you want to place the zone; For tunnel zones, you must also
specify the carrier zone, which is the security zone with which the tunnel zone is logically
associated. A carrier zone provides firewall protection to the encapsulated traffic.
For more information about zones on security devices, refer to the Concepts & Examples
ScreenOS Reference Guide: Fundamentals.
You can configure general properties and SCREEN attack protection for predefined or
custom Security Zones.
Zone General Properties
Chapter 3: Network Settings
39