NetScreen Firewall common Commands-Interface Chapter

NetScreen Firewall common Commands-Interface Chapter

Ns25-> Get interface//view interface information

A-active, I-inactive, u-up, D-down, R-ready

Interfaces in Vsys Root:
Name IP Address Zone MAC VLAN State VSD
eth1 192.168.0.2/24 Trust 0014.f642.7c20-u-
Eth2 0.0.0.0/0 DMZ 0014.f642.7c25-d-
Eth3 116.233.11.11/32 untrust 0014.f642.7c26-u-
Eth4 0.0.0.0/0 Trust 0014.f642.7c27-d-
Vlan1 0.0.0.0/0 VLAN 0014.f642.7c2f 1 D-

ns25-> get int eth1//view configuration of Interface 1
Interface Ethernet1:
Number 0, If_info 0, If_index 0, mode NAT
Link up, Phy-link Up/full-duplex
Vsys Root, Zone Trust, VR TRUST-VR
DHCP client disabled
PPPoE disabled
*ip 192.168.0.2/24 mac 0014.f642.7c20
*manage IP 192.168.0.2, mac 0014.f642.7c20
Route-deny Disable
Ping enabled, Telnet enabled, SSH enabled, SNMP enabled
Web enabled, Ident-reset disabled, SSL enabled
Webauth Disabled, Webauth-ip 0.0.0.0
OSPF disabled BGP disabled RIP disabled
Bandwidth:physical 100000kbps, CONFIGURED 0kbps, current 0kbps
Total configured GBW 0kbps, total allocated GBW 0kbps
Dhcp-relay disabled
Dhcp-server enabled, status on

Ns25-> Set Zone name office//Create a 3-tier zone named Office

Ns25-> Set Zone name L2-office L2 1//Create a 2-layer zone named L2-office (the two-tier interface must start with a l2-name), and the VLAN ID is 1.

Ns25-> set interface Eth4 Zone Office//sets interface 4 as an interface for office zone.

Ns25-> set Interface Vlan1 IP 10.10.10.10/24//sets Vlan1 IP to 10.10.10.10

Ns25-> set interface Vlan1 Manage Web//Launch Vlan1 interface Web management features

Ns25-> set interface Vlan1 Manage ping//Open Vlan1 interface ping function

Ns25-> set interface Eth4 NAT//SET interface 4 to NAT mode

Ns25-> set interface Eth4 route//set interface 4 to route mode

set interface ethernet1 DHCP Server service//enable DHCP service
set interface Ethernet1 DHCP server enable//on interface 1 to turn on DHCP service
set interface Ethernet1 DHCP server Option lease 1440000//Set DHCP service lease
set interface Ethernet1 DHCP server Option Gateway 192.168.0.2 
set interface ethernet1 DHCP server Option netmask 255.255.255.0 
set interface ethernet1 DHCP server option DNS1 202.96.209.5 
set interface ethernet1 DHCP server Option dns2 202.96.209.133 
set interface ethernet1 DHCP server IP 192.168.0.10 to 192.168.0.100//DHCP Address pool

Ns25-> set interface eth3 MIP 1.1.1.1 host 2.2.2.2 vrouter TRUST-VR//Set MIP, extranet ip1.1.1.1 bound to network IP 2.2.2.2

Ns25-> unset interface Eth3 MIP 1.1.1.1//de-1.1.1.1 MIP settings

Ns25-> set Interface Eth3 VIP UNTRUST-IP + FTP 192.168.0.10//Set VIP
Ns25-> set Interface Eth3 VIP UNTRUST-IP + 8000 FTP 192.168.0.10

NetScreen Firewall common Commands-Interface Chapter