Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual page 9

Copyright © 2010, Juniper Networks, Inc.
Malicious URL Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Example: Enabling the Malicious URL Blocking Option (NSM Procedure) . . . . . . 50
Interface Types in ScreenOS Devices Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Configuring Physical and Function Zone Interfaces in ScreenOS Devices
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Setting Interface Properties Using the General Properties Screen . . . . . . . . . . . . 53
Setting WAN Properties Using the WAN Properties Screen . . . . . . . . . . . . . . . . . . 54
Setting Port Properties Using the Port Properties Screen . . . . . . . . . . . . . . . . . . . 54
Using MLFR and MLPPP Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Setting Physical Link Attributes for Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Enabling Management Service Options for Interfaces . . . . . . . . . . . . . . . . . . . . . . 56
Setting DHCPv6 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Example: Assigning TCP/IP Settings for Hosts Using DHCP (NSM Procedure) . . 58
Configuring Custom DHCP Options (NSM Procedure) . . . . . . . . . . . . . . . . . . . . . 59
Using Interface Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Using Interface Secondary IP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Enabling ScreenOS Devices for Interface Monitoring . . . . . . . . . . . . . . . . . . . . . . . 61
Supporting Generic Routing Encapsulation Using Tunnel Interfaces . . . . . . . . . . 62
Interface Network Address Translation Methods . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Interface Network Address Translation Using MIPs . . . . . . . . . . . . . . . . . . . . . . . . 62
Example: Configuring MIPs (NSM Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Interface Network Address Translation Using VIPs . . . . . . . . . . . . . . . . . . . . . . . . 65
Mapping Predefined and Custom Services in a VIP . . . . . . . . . . . . . . . . . . . . . . . . 65
Example: Configuring VIPs (NSM Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
Interface Network Address Translation Using DIPs . . . . . . . . . . . . . . . . . . . . . . . . . 67
Example: Enabling Multiple Hosts Using Port Address Translation (NSM
Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Example: Translating Source IP Addresses into a Different Subnet (NSM
Procedure) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Enabling Managed Devices Using Incoming DIP . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Example: Configuring Interface-Based DIP (NSM Procedure) . . . . . . . . . . . . . . . . 74
Example: Configuring DIP Pools on the Untrust Interface (NSM Procedure) . . . . 75
Example: Configuring an Aggregate Interface (NSM Procedure) . . . . . . . . . . . . . . 77
Example: Configuring a Multilink Interface (NSM Procedure) . . . . . . . . . . . . . . . . 78
Example: Configuring a Loopback Interface (NSM Procedure) . . . . . . . . . . . . . . . 79
Configuring Virtual Security Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Example: Configuring a Redundant Interface (NSM Procedure) . . . . . . . . . . . . . . 80
Example: Configuring a Subinterface (NSM Procedure) . . . . . . . . . . . . . . . . . . . . 84
Example: Configuring a WAN Interface (NSM Procedure) . . . . . . . . . . . . . . . . . . . 86
Configuring a Tunnel Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Using Numbered Tunnel Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Using Unnumbered Tunnel Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Configuring Maximum Transmission Unit Size . . . . . . . . . . . . . . . . . . . . . . . . 88
ADSL Interface in ScreenOS Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
ADSL, ADSL Interface, and ADSL Settings in ScreenOS Devices . . . . . . . . . . . . . 89
About ADSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
About the ADSL Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
ADSL Settings from the Service Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Table of Contents
ix