Netscreen防火墙技术培训.pptVIP

Jiangsu Kst Information Co.,Ltd. Netscreen 防火墙培训 江苏鸿嘉资讯有限公司 马建中 How to manage the netscreen firewall Console 9600-8-0-1 Web Telnet telnet Default username and password : netscreen Elements Interface Zone Virtual Router Interface Physical interface Logical interface Zone Zone include interface Untrust,trust,global,dmz ,V1-trust,V1-Untrust,V1-DMZ etc You can create new zone as the following set zone name public set zone name private Virtual Router Untrust VR Trust VR Normally ,no need to change Policy Direction(Source,destination) Action Schedule For example. set policy from trust to untrust any any any permit Policy between different zone Default action : deny So you must create policy How to quickly configure Netscreen firewall Set ip Set route Set policy Set ip NS have several interfaces:untrust ,trust ,dmz,ha Set interface trust ip 00/24 Set interface untrust ip Set route Set route vr trust-vr int untrust gateway Set policy Set policy from untrust to global any vip() http permit objects Source address Destination address User Schedule Firewall basic configuration Backup and restore config Upgrade ScreenOS Backup and restore config Save config tftp Save tftp config You should install tftp server at first. set your pc in the same network as ns Upgrade ScreenOS Two methods WebUI Console WebUI Console Save tftp flash you should get the newer ScreenOS at first. Firewall Model Transparent NAT/Route Default status : Transparnet (except ns-5xp) Transparent Model Layer two Cut-through No ip (only manage-ip to manage ns) Still protect intranet and can build vpn for complex network NAT/Route Model Layer Three Protect intranet Save IP address How to make ns from transparent to NAT/Route Unset vlan-ip (not necessary) Set int e1 zone trust set int e2 zone dmz set int e3 zone untrust set int e1 ip 54/24 sa * * * * * * * *