Knowledge Search


×
 

[ScreenOS] Binding an Interface to a Zone

  [KB4762] Show Article Properties


Summary:
This article describes how to bind an interface to a zone. A WebUI and a CLI procedure are described.


Symptoms:

Cause:

Solution:

WebUI Procedure


To bind an interface to a zone, perform the following steps:

Note: This article only applies to interfaces that have not been bound to a zone.

Step one: Open the WebUI. For an example of how to access the WebUI, consult: KB4060 - Accessing Your NetScreen, SSG, or ISG Firewall Using the WebUI

Step two: From the ScreenOS options menu, click Network, and then click Interfaces.

Image of step two

Step three: From the interface table, choose the interface from which you wish to bind an interface, click Edit.

Note: For this example, we chose to edit the ethernet2 interface on a NetScreen-50. The NetScreen-5XP and the NetScreen-5XT only have four interfaces.

Image of step three

Step four: From the Zone Name drop-down menu, click to choose a zone.

Note: For this example, we chose the DMZ zone. The NetScreen-5XP and the NetScreen-5XT do not have a DMZ.

Image of step four

Step five: Click OK.

Note: Once an interface is bound to a zone, an IP address can be assigned to it. For more information on defining an IP on an interface, go to Defining an IP on an Interface.


CLI Procedure

 
NS-5XP-> set int eth2 zone DMZ





For more information, refer to the Technical Documentation:

Concepts & Examples Guide - ScreenOS Reference Guide - Fundamentals
http://www.juniper.net/techpubs/software/screenos/screenos6.3.0/630_ce_fundamentals.pdf
Page 42 - Binding an Interface to a Security Zone


Related Links: