Juniper Networks 5000 SERIES Manuale Utente

Pagina di 116
Chapter 3 Configuring the Device
28
User’s Guide
For example, to set the IP address and subnet mask of the MGT interface to 
10.100.2.183 and 16, respectively:
set interface mgt ip 10.100.2.183/16
3.
To confirm the new port settings, execute the following command:
get interface mgt
Setting the IP Address for the Trust Zone Interface
The NetScreen-5000 Series device usually communicates with your protected network 
through an interface bound to the Trust zone. To allow an interface to communicate with 
internal devices, you must assign it the IP address and subnet mask for your protected 
network.
To set up the ethernet2/2 interface to communicate with your trusted network:
1.
Determine the IP address and subnet mask of your trusted network.
2.
Set the ethernet2/2 interface to the Trust zone by executing the following 
command:
set interface ethernet2/2 zone trust
3.
Set the IP address and subnet mask by executing the following command:
set interface ethernet2/2 ip ip_addr/mask
where ip_addr is the IP address and mask is the subnet mask. For example, to 
set the IP address and subnet mask of the ethernet2/2 interface to
10.250.2.1/16:
set interface ethernet2/2 ip 10.250.2.1/16
4.
(Optional) To confirm the new port settings, execute the following command:
get interface ethernet2/2
Setting the IP Address for the Untrust Zone Interface
The NetScreen-5000 Series device usually communicates with external (untrusted) 
devices through an interface bound to the Untrust zone. To allow an interface to 
communicate with external devices, you must assign it a public IP address.
To set up the ethernet2/3 interface to communicate with external devices:
1.
Choose an unused public IP address and subnet mask.
2.
Set the ethernet2/3 interface to the Untrust zone by executing the following 
command:
set interface ethernet2/3 zone untrust