Converting a Juniper Firewall  from Layer 3 Mode to Layer 2 Mode

This article applies to ScreenOS 5.0 and higher.

When a device is reset to factory defaults, it comes up in layer 3 mode. In order to configure the box in Transparent mode, it must be converted to the layer 2 mode. This is performed using a console connection.

For more information on resetting the NetScreen to a factory default, go to: How Do I Perform a Hardware Reset of My NetScreen to Factory Default Settings?

To convert a NetScreen from layer 3 mode to layer 2 mode in ScreenOS 5.0, perform the following steps:

Access the NetScreen device via a console connection. For more information on accessing the NetScreen via a console connection, select your product from the list below:

• Accessing the Command Line Interface via the Console Port on Your NetScreen-25/50
• Accessing the Command Line Interface via the Console Port on Your NetScreen-204/208

From the NetScreen - HyperTerminal, enter unset interface ethernet1 ip, and press Enter.

Enter set interface ethernet1 zone V1-Trust, and press Enter.

Enter set interface ethernet2 zone V1-DMZ, and press Enter.

Enter set interface ethernet3 zone V1-Untrust, and press Enter.

The console will respond back with Changed to pure l2 mode.

The device has now been converted to transparent mode.