Figure 31: Dmz Dual Untrust Port Mode - Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual

Copyright © 2010, Juniper Networks, Inc.
Table 19: Extended Bindings (continued)
Port Interface
1 ethernet1
2 ethernet1
3 ethernet2
4 ethernet2
Modem serial
DMZ-Dual-Untrust Port Mode
DMZ/Dual Untrust mode binds interfaces to the Untrust, Trust, and DMZ security zones,
enabling you to pass traffic simultaneously from the internal network.
NOTE: The DMZ/Dual Untrust port mode is supported only on the
NetScreen-5GT Extended platform using ScreenOS 5.1 and later.
See Figure 31 on page 109 for port, interface, and zone bindings.

Figure 31: DMZ Dual Untrust Port Mode

This mode provides the following bindings:
Binds the Ethernet ports 1 and 2 to the ethernet1 interface, which is bound to the Trust
security zone.
Binds the Ethernet port 3 to the ethernet2 interface, which is bound to the DMZ security
zone.
Binds the Ethernet port 4 to the ethernet3 interface, which is bound to the Untrust
security zone.
Binds the Untrust Ethernet port to the ethernet4 interface, which is bound to the Untrust
security zone.
Zone
Trust
Trust
DMZ
DMZ
Untrust
Chapter 4: Adding Devices
109