Configuring Your NetScreen Device for NAT Mode With the WebUI Wizard

Rapid Deployment / Initial Configuration Wizard / EZ Setup configuration information for newer version of Screen OS can be found in the Getting Started or Hardware Installation and Configuration Guides for the hardware platform. Hardware documentation is located at NetScreen Hardware / Security Devices

This article applies to ScreenOS 4.0.

To configure your NetScreen device for NAT Mode with the WebUI Wizard, perform the following steps:

The WebUI Wizard is only accessible when first configuring the NetScreen device, or after resetting to factory defaults.

Open the WebUI. For an example of how to access the WebUI, consult: KB4060 - Accessing Your NetScreen, SSG, or ISG Firewall Using the WebUI

From the operational mode screen, click to select NAT Mode.

Click Next.

From the administrator's login name and password screen, enter an Administration Login name, Password, and Confirm Password. Click Next.

In this example, the default Administration Login name and Password netscreen was entered.

From the untrust zone connection screen, click to choose your Internet connection type.

Click Next.

From the trust zone settings screen, enter a Trust Zone Interface IP, and Netmask. Click Next.

In this example, the default Trust Zone Interface IP address of 192.168.1.1 with a Netmask of 255.255.255.0 was entered.

 

From the trust zone management services screen, to enable management services in the trust zone, click to select Yes. To disable management services, click to select No.

If you select No, the only management method available is using a Console port connection.

In this example, Yes has been chosen and all management services have been enabled.

If Yes was selected, click to choose which management services to enable and then click Next.

Web User Interface allows you to connect with your browser. Telnet allows you to connect with a telnet session. Allow Ping on this IP allows your trust interface to reply to ping packets.

From the restrict management traffic screen, to restrict management services to a single IP address in the trust zone, click to select Yes. To allow management services from any computer in the trust zone, click to select No. Click Next.

In this example No has been selected.

From the trust zone DHCP screen, to enable DHCP in the trust network, click to select Yes. To disable DHCP, click to select No.

In this example, No has been chosen.

Click Next.

From the summary screen, verify that your settings are correct, and then click Next.

The settings will be saved to the flash memory in your NetScreen.

The following warning will appear if you configured the trust interface with an IP address other than 192.168.1.1.