Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual page 95

Copyright © 2010, Juniper Networks, Inc.
For Scale-Size, enter 1.
12.
Select the Fixed Port check box.
13.
NOTE: The Fixed Port is enabled by default while adding multiple DIP
range for a DIP ID.
For Extended IP, enter 211.10.1.10.
14.
For Netmask, enter 24.
15.
Add the route to the Corporate Office on the trust-vr of Office A:
16.
In the device navigation tree, select Network > Routing. Double-click trust-vr router.
The General Properties screen appears.
In the trust-vr navigation tree, select Routing Table. Click the Add icon and configure
17.
the new route:
Set the IP address/netmask to 0.0.0.0/0.
For Next Hop, select Gateway, and the gateway options appear.
For Interface, select ethernet3.
For Gateway IP Address, enter 195.1.1.254.
Leave all other defaults, and then click OK to save the route.
18.
Click OK to save your changes to the trust-vr, and then click OK to save your changes
19.
and close the Office A device configuration.
Configure ethernet1 (Trust Zone) for Office B:
20.
Double-click Office B device to open the device configuration. In the device navigation
tree, select Network > Interface.
Double-click ethernet1. The General Properties screen appears.
Configure IP address/netmask as 10.1.1.1/24 and Interface Mode as NAT.
21.
Click OK to save your changes.
Configure ethernet3 (Untrust Zone) for Office B:
22.
In the device navigation tree, select Network > Interface.
Double-click ethernet3. The General Properties screen appears.
Configure IP address/netmask as 201.1.1.1/24 and Interface Mode as Route.
In the interface navigation tree, select NAT > DIP. Click the Add icon to display the
23.
New Dynamic IP dialog box. Configure the DIP, and then click OK.
Enter the DIP ID.
24.
To add multiple DIP ranges for a particular DIP ID:
25.
Chapter 3: Network Settings
71