Firewall transparent Mode setting (Jnuiper ssg- $ )
The first is to understand what is the transparent mode of the firewall, which is equivalent to the firewall as a switch, the firewall will filter through the IP packets, but will not modify the IP packet header of any information.
Advantages of Transparent Mode:
1, do not need to change the existing network and configuration
2, do not need to create a mapping or virtual IP
3. Transparent mode to minimize system resource consumption
The specific configuration is as follows:
1. Configuring the Intranet interface for transparent mode
650) this.width=650; "Width=" 554 "height=" 194 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>
2. Configuring an Extranet interface for routing patterns
650) this.width=650; "Width=" 553 "height=" 206 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>
3. Configure vlan1 IP, that is, manage IP
650) this.width=650; "Width=" 553 "height=" 306 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>
4. to view the configuration of all ports:
650) this.width=650; "Width=" 553 "height=" 238 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>
5. configuration Policies:
V1-trust to V1-untrust This is an internal external visit, which is generally the release of all movements.
V1-untrust to V1-trust This is the external internal access rights, generally according to customer needs to operate (here the server IP is the real IP address of the back-end server ).
650) this.width=650; "Width=" 553 "height=" 299 "src="/e/u261/themes/default/images/spacer.gif "style=" Background:url ("/e/u261/lang/zh-cn/images/localimage.png") no-repeat center;border:1px solid #ddd; "alt=" Spacer.gif "/>
Juniper Firewall two layer transparent mode configuration