Juniper-networks SSG 20 Manuel d'utilisateur

Juniper Networks, Inc.1194 North Mathilda AvenueSunnyvale, CA 94089USA408-745-2000www.juniper.netPart Number: 530-015646-01, Revision 03Security Produ

SSG 20 Hardware Installation and Configuration Guide10  Port and Power ConnectorsPort and Power ConnectorsThis section describes and displays the loc

Front Panel  11Front PanelThis section describes the following elements on the front panel of an SSG 20 device: System Status LEDs Port Description

SSG 20 Hardware Installation and Configuration Guide12  Front PanelPIM 2 Green On steadily Indicates that the mini PIM is functioning.Blinking Indica

Front Panel  13Port DescriptionsThis section explains the purpose and function of the following: Ethernet Ports Console Port AUX PortEthernet Port

SSG 20 Hardware Installation and Configuration Guide14  Front PanelAUX PortThe auxiliary (AUX) port is an RJ-45 serial port wired as data terminal eq

Front Panel  15Table 4: Mini PIM LED States on the SSG 20Type Name Color State DescriptionADSL 2/2+(Annex A and B)SYNC Green On steadily Indicates t

SSG 20 Hardware Installation and Configuration Guide16  Back PanelBack PanelThis section describes the following elements on the back panel of an SSG

Back Panel  17Grounding LugA one-hole grounding lug is provided on the rear of the chassis to connect the device to earth ground (see Figure 6).To gr

SSG 20 Hardware Installation and Configuration Guide18  Back PanelAntennae TypesThe SSG 20-WLAN device supports three types of custom-built radio ant

 19Chapter 2Installing and Connecting the DeviceThis chapter describes how to mount an SSG 20 device and connect cables and power to the device. This

2 Copyright NoticeCopyright © 2006 Juniper Networks, Inc. All rights reserved.Juniper Networks and the Juniper Networks logo are registered trademark

SSG 20 Hardware Installation and Configuration Guide20  Before You BeginBefore You BeginThe location of the chassis, the layout of the mounting equip

Installing Equipment  21To front-mount an SSG 20 device onto a standard 19-inch equipment rack, perform the following steps:Figure 7: SSG 20 Front-m

SSG 20 Hardware Installation and Configuration Guide22  Connecting Interface Cables to a DeviceTo desk-mount an SSG 20 device, perform the following

Connecting a Device to a Network  23Connecting a Device to a NetworkAn SSG 20 device provides firewall and general security for networks when it is p

SSG 20 Hardware Installation and Configuration Guide24  Connecting a Device to a NetworkEthernet PortsTo establish a high-speed connection, connect t

Connecting a Device to a Network  25Figure 11: Microfilter and Splitter on Your Network ConnectionISDN, T1, E1, and V.92 Mini PIMsTo connect the min

SSG 20 Hardware Installation and Configuration Guide26  Connecting a Device to a NetworkWireless AntennaeIf you are using the wireless interface, you

 27Chapter 3Configuring the DeviceScreenOS software is preinstalled on an SSG 20 device. When the device is powered on, it is ready to be configured.

SSG 20 Hardware Installation and Configuration Guide28  Accessing a DeviceAccessing a DeviceYou can configure and manage a device in several ways: C

Accessing a Device  293. Launch a serial terminal-emulation program on your workstation. The required settings to launch a console session are as fol

Table of Contents  3Table of ContentsAbout This Guide 5Organization ...

SSG 20 Hardware Installation and Configuration Guide30  Accessing a DeviceFigure 14: WebUI Login Prompt4. If you have not yet changed the default lo

Default Device Settings  31Default Device SettingsThis section describes the default settings and operation of an SSG 20 device.Table 5 shows the def

SSG 20 Hardware Installation and Configuration Guide32  Default Device SettingsTo unset ethernet0/3 from bgroup0 and assign it to the Trust zone with

Basic Device Configuration  33Basic Device ConfigurationThis section describes the following basic configuration settings: Root Admin Name and Passw

SSG 20 Hardware Installation and Configuration Guide34  Basic Device ConfigurationDate and TimeThe time set on an SSG 20 device affects events such a

Basic Device Configuration  35CLIunset interface bgroup0 port ethernet0/3unset interface bgroup0 port ethernet0/4set interface bgroup1 port ethernet0

SSG 20 Hardware Installation and Configuration Guide36  Basic Device ConfigurationHostname and Domain NameThe domain name defines the network or subn

Basic Wireless Configuration  37Backup Untrust Interface ConfigurationThe SSG 20 device allows you to configure a backup interface for untrust failov

SSG 20 Hardware Installation and Configuration Guide38  Basic Wireless ConfigurationOnce you have set an SSID to the wireless0/0 interface, you can a

Basic Wireless Configuration  39Table 7: Wireless Authentication and Encryption OptionsRefer to the Concepts & Examples ScreenOS Reference Guide

4  Table of ContentsSSG 20 Hardware Installation and Configuration GuideUsing Telnet ...

SSG 20 Hardware Installation and Configuration Guide40  Basic Wireless Configuration5. Activate wireless changes.Wireless > General Settings >

Mini PIM Configuration  41Mini PIM ConfigurationThis section explains how to configure the mini physical interface modules (PIMs): ADSL2/2+ Interfac

SSG 20 Hardware Installation and Configuration Guide42  Mini PIM ConfigurationVirtual CircuitsTo add virtual circuits, you create subinterfaces to th

Mini PIM Configuration  43WebUINetwork > Interfaces > List > Edit (for the adsl1/0 interface): Enter the following, then click Apply:VPI/VCI

SSG 20 Hardware Installation and Configuration Guide44  Mini PIM ConfigurationStatic IP Address and NetmaskIf your service gave you a specific, fixed

Mini PIM Configuration  45CLIset interface bgroup0 dhcp server option dns1 1.1.1.152saveFor more information about configuring the ADSL and ADSL2/2+

SSG 20 Hardware Installation and Configuration Guide46  Mini PIM Configuration AT&T Pub 54014 ITU G.751, G.703To configure the T1 mini PIM, use

Mini PIM Configuration  47set ppp profile “junipertest” auth local-name “juniper”set ppp profile “junipertest” auth secret “password”set interface se

SSG 20 Hardware Installation and Configuration Guide48  Basic Firewall ProtectionsBasic Firewall ProtectionsThe devices are configured with a default

Resetting a Device to Factory Defaults  49Resetting a Device to Factory DefaultsIf you lose the admin password, you can reset the device to its defau

 5About This GuideThe Juniper Networks Secure Services Gateway (SSG) 20 device is an integrated router and firewall platform that provides Internet P

SSG 20 Hardware Installation and Configuration Guide50  Resetting a Device to Factory Defaults

Required Tools and Parts  51Chapter 4Servicing the DeviceThis chapter describes service and maintenance procedures for an SSG 20 device. It contains

SSG 20 Hardware Installation and Configuration Guide52  Replacing a Mini-Physical Interface ModuleRemoving a Blank FaceplateTo maintain proper airflo

Replacing a Mini-Physical Interface Module  538. Grasp the screws on each side of the mini PIM faceplate and slide the mini PIM out of the device. Pl

SSG 20 Hardware Installation and Configuration Guide54  Upgrading Memory6. If necessary, arrange the cables to prevent them from dislodging or develo

Upgrading Memory  556. Release the 128 MB DIMM DRAM by pressing your thumbs outward on the locking tabs on each side of the module so that the tabs m

SSG 20 Hardware Installation and Configuration Guide56  Upgrading Memory9. Place the memory-card cover over the slot.10. Use the phillips screwdriver

 57Appendix ASpecificationsThis appendix provides general system specifications for an SSG 20 device. It contains the following sections: “Physical”

SSG 20 Hardware Installation and Configuration Guide58  PhysicalPhysicalTable 8: SSG 20 Physical SpecificationsElectricalTable 9: SSG 20 Electrical

Certifications  59CertificationsSafety CAN/CSA-C22.2 No. 60950-1-03/UL 60950-1 Safety of Information Technology Equipment EN 60950-1 (2000) Third E

SSG 20 Hardware Installation and Configuration Guide6  OrganizationOrganizationThis guide contains the following sections: Chapter 1, “Hardware Over

SSG 20 Hardware Installation and Configuration Guide60  ConnectorsT1 Interface FCC Part 68 - TIA 968 Industry Canada CS-03 UL 60950-1 Applicable r

Connectors  61Figure 23 shows the location of the pins on the DB-9 female connector.Figure 23: DB-9 Female ConnectorTable 12 provides the DB-9 conne

SSG 20 Hardware Installation and Configuration Guide62  Connectors

 63Appendix BInitial Configuration WizardThis appendix provides detailed information about the Initial Configuration Wizard (ICW) for an SSG 20 devic

SSG 20 Hardware Installation and Configuration Guide64 1. Rapid Deployment WindowFigure 24: Rapid Deployment WindowIf your network uses NetScreen-Se

 653. WLAN Access Point WindowIf you are using the device in the WORLD or ETSI regulatory domain, you must choose a country code. Select the appropri

SSG 20 Hardware Installation and Configuration Guide66 5. ADSL2/2+ Interface WindowIf you have the ADSL2/2+ mini PIM installed in your device, you ca

 67Table 13: Fields in ADSL Interface Configuration WindowIf you do not know these settings, refer to the Common Settings for Service Providers docu

SSG 20 Hardware Installation and Configuration Guide68 6. T1 Interface WindowsIf you have the T1 mini-PIM installed in your device and you selected t

 69Table 14: Fields in T1 Physical Layer Tab WindowField DescriptionClocking Sets the transmit clock on the interface.Line Buildout Sets the distanc

CLI Conventions  7About This GuideFigure 1: Navigational Path and Configuration SettingsCLI ConventionsThe following conventions are used to present

SSG 20 Hardware Installation and Configuration Guide70 Figure 30: T1 Frame Relay Tab WindowTable 15: Fields in T1 Frame Relay Tab WindowField Descr

 71If you have the T1 mini-PIM installed in your device and you selected the PPP option, the following additional windows are displayed: PPP Option

SSG 20 Hardware Installation and Configuration Guide72 Figure 32: PPP Option with Peer User Tab WindowTable 17: Fields in PPP Option with Peer User

 73Table 18: Fields in Cisco HDLC Option with Cisco HDLC Tab Window7. E1 Interface WindowsIf you have the E1 mini-PIM installed in your device and y

SSG 20 Hardware Installation and Configuration Guide74 Table 19: Fields in E1 Physical Layer Tab WindowFigure 35: E1 Frame Relay Tab WindowTable 20

 75To configure the E1 interface with PPP options, see “PPP Option with PPP Tab Window” on page 71.To configure the E1 interface with the Cisco HDLC,

SSG 20 Hardware Installation and Configuration Guide76 Table 21: Fields in ISDN Physical Layer Tab WindowYou can select the bri1/0 interface to conn

 77Figure 37: ISDN Connection Tab WindowTable 22: Fields in ISDN Connection Tab WindowField DescriptionPPP Profile Name Sets a PPP profile name to

SSG 20 Hardware Installation and Configuration Guide78 9. V.92 Modem Interface WindowIf you have the V.92 mini-PIM installed in your device, you can

 79Figure 39: Eth0/0 Interface WindowTable 24: Fields in Eth0/0 Interface Window11. Eth0/1 Interface (DMZ Zone) WindowThe eth0/1 interface can have

SSG 20 Hardware Installation and Configuration Guide8  Obtaining Documentation and Technical SupportObtaining Documentation and Technical SupportTo o

SSG 20 Hardware Installation and Configuration Guide80 Figure 40: Eth0/1 Interface WindowTable 25: Fields in Eth0/1 Interface Window12. Bgroup0 Int

 81Table 26: Fields in Bgroup0 Interface Window13. Wireless0/0 Interface (Trust Zone) WindowIf you are configuring the SSG 20-WLAN device, you must

SSG 20 Hardware Installation and Configuration Guide82 Table 27: Fields in Wireless0/0 Interface Window14. Interface Summary WindowAfter you have co

 83Check your interface configuration, then click Next when ready to proceed. The Physical Ethernet DHCP Interface window appears.15. Physical Ethern

SSG 20 Hardware Installation and Configuration Guide84 17. Confirmation WindowConfirm your device configuration and change as needed. Click Next to s

Index  85IndexAAAL5 multiplexing...41ADSLconfiguring interface...

86  IndexSSG 20 Hardware Installation and Configuration GuideSstatic IP address.....41UUntrus

 9Chapter 1Hardware OverviewThis chapter provides detailed descriptions of the SSG 20 chassis and its components. It contains the following sections: