Default Settings - Juniper Networks NETSCREEN-5GT Guía De Usuario

Chapter 2 Configuring the Device
D S
EFAULT ETTINGS
This section describes the default settings and operation of the NetScreen-5GT as it is
shipped from the factory. These default settings are such that, in most cases, there are
only a few items that you must configure. The figure below shows the default
configuration for the NetScreen-5GT.
WebUI and Telnet access to the NetScreen device allowed from any device in the subnetwork.
The NetScreen device
assigns IP addresses to
devices in your network
via DHCP. Addresses are
in the range 192.168.1.33
- 192.168.1.126.
All types of traffic
originated from your
network is allowed to the
Internet, but traffic
originated from the
Internet is not allowed to
your network.
The Untrust interface is bound to the Untrust zone and is configured with the IP address
0.0.0.0/0. To allow the NetScreen device (and the devices on your network) to connect to
the Internet, you must configure the Untrust interface according to information obtained
from your Internet Service Provider (ISP). Refer to
Any user in the subnetwork can manage the NetScreen device if they know the login and
password. To change the default login and password, refer to
page 9. To restrict management of the NetScreen device to specific workstations, refer to
"Restricting Management" on page
The Trust interface is bound to the Trust zone and is configured with the subnetwork
address 192.168.1.1/24. This means that all devices in your network that you connect to
the Trust interface must be in the same subnetwork and have IP addresses in that
subnetwork. The NetScreen device is also configured to assign IP addresses for the
192.168.1.1/24 subnetwork to your devices. For more information, refer to
Address" on page
The NetScreen device allows any type of traffic to the Internet that originates from
devices in your network, but does not allow any traffic that originates in the Internet to
reach your network. You can configure additional restrictions; refer to
Policies" on page
8
Hub
External Router
10.
10.
11.
Trust Zone
Trust Interface
192.168.1.1/24
Untrust Interface
Untrust Zone
To Internet
"Untrust Interface Address" on page
"Login and Password" on
"Additional
0.0.0.0/0
9.
"Trust Interface
User's Guide