J
u
n
i
p
e
r
S
S
G
绯?/p>
鍒?/p>
V
P
N
閰?/p>
缃?/p>
璇?/p>
缁?/p>
璁?/p>
缃?/p>
鍥?/p>
褰?/p>
鐣?/p>
闈?/p>
鏈閰嶇疆浣跨敤鐨勬槸
SSG140
鍜?/p>
SSG20
鏉ュ仛绔欑偣鍒扮珯鐐圭殑鍩轰簬璺敱鐨?/p>
VPN
锛堜袱绔湴鍧�閮戒负闈欐�?/p>
IP
鍦板潃锛夈�?/p>
棣栧厛鎴戜滑璇翠竴涓嬮厤缃殑鎬濊矾锛?/p>
閰嶇疆鍩轰簬璺敱鐨勭珯鐐瑰埌绔欑偣
VPN
锛?/p>
1.
涓虹粦瀹氬埌瀹夊叏鍖烘鍜岄�氶亾鎺ュ彛鐨勭墿鐞嗘帴鍙ｅ垎閰?/p>
IP
鍦板潃銆?/p>
2.
閰嶇疆
VPN
閫氶亾锛屽湪
Untrust
鍖烘鍐呮寚瀹氬叾澶栧悜鎺ュ彛锛屽皢鍏剁粦瀹氬埌閫氶亾鎺ュ彛锛屽苟閰嶇疆鍏朵唬鐞?/p>
ID
銆?/p>
3.
鍦?/p>
Trust
鍜?/p>
Untrust
鍖烘鐨勯�氳绨夸腑杈撳叆鏈湴鍙婅繙绋嬬鐐圭殑
IP
鍦板潃銆?/p>
4.
杈撳叆閫氬悜
trust-vr
涓閮ㄨ矾鐢卞櫒鐨勭己鐪佽矾鐢便�侀�氳繃閫氶亾鎺ュ彛閫氬悜鐩爣鐨勮矾鐢变互鍙婇�氬悜鐩爣鐨?/p>
Null
璺敱銆備负
Null
璺敱鍒嗛厤杈冮珮鐨勫害閲?/p>
(
杩滅闆?/p>
)
锛屼互渚垮叾鎴愪负閫氬悜鐩爣鐨勪笅涓�涓彲閫夎矾鐢便�?/p>
鎺ョ潃锛屽鏋滈�氶亾鎺ュ彛鐨勭姸鎬佸彉涓衡�滀腑鏂�濓紝涓斿紩鐢ㄨ鎺ュ彛鐨勮矾鐢卞彉涓洪潪娲诲姩锛屽垯瀹夊叏璁惧浼氫娇鐢?/p>
Null
璺敱
(
鍗冲疄璐ㄤ笂涓㈠純浜嗗彂閫佺粰瀹冪殑浠讳綍淇℃伅娴?/p>
)
锛岃�屼笉浣跨敤缂虹渷璺敱
(
鍗宠浆鍙戞湭鍔犲瘑鐨勪俊
鎭祦
)
銆?/p>
5.
涓烘瘡涓珯鐐归棿閫氳繃鐨?/p>
VPN
娴侀噺璁剧疆绛栫暐銆?/p>
浠ヤ笅閰嶇疆涓?/p>
SSG140
闃茬伀澧?/p>
鍒濆鍖栭槻鐏
Juniper
闃茬伀澧欏嚭鍘傛椂鍙�氳繃缂虹渷璁剧疆鐨?/p>
IP
鍦板潃浣跨敤
Telnet
鎴栬�?/p>
Web
鏂瑰紡绠＄悊銆傜己鐪?/p>
IP
鍦板潃涓猴細銆?/p>
鍙互鐩存帴閫氳繃
WEB
鏉ヨ繘琛岄厤缃紝浣嗗鏄撳彂鐢熼敊璇紝寤鸿浣跨敤璁惧鑷甫鐨勯厤缃嚎杩炴帴璁＄畻鏈?
鐨?/p>
COM
鍙ｉ噰鐢ㄨ秴绾х粓绔潵琛岄厤缃�?/p>
SSG140-> unset interface ethernet0/0 ip
SSG140-> set interface ethernet0/0 zone trust
SSG140-> set interface ethernet0/0 manage web
SSG140-> save
Save System Configuration ...
鎺ヤ笅鏉ユ垜浠氨鍙互鐢?/p>
WEB
鏉ョ鐞嗚澶囷紝鎺ㄨ崘浣跨敤
IE
娴忚鍣細
鍦?/p>
IE
娴忚鍣ㄥ湴鍧�鏍忛噷杈撳叆
鐢ㄦ埛鍚嶅拰瀵嗙爜鍧囦负
:netscreen
2
銆侀厤缃叾瀹冨畨鍏ㄥ尯娈靛苟閰嶇疆鍦板潃
瀹氫箟鍐呯綉鎺ュ彛
Network > Interfaces > Edit (
瀵逛簬
ethernet0/1):
淇敼绾㈢嚎閮ㄥ垎锛岀劧鍚庡崟鍑?/p>
Apply
:
A
锛?/p>
Z
one Name:
杩欐槸瀹氫箟鍐呴儴
LAN
鐨?/p>
IP
锛屾墍浠ュ簲璇ュ湪
Trust
瀹夊叏鍖烘
B
锛?/p>
Static IP :
鎴戜滑鍋氱殑鏄潤鎬?/p>
IP
鍦板潃鐨勫疄楠岋紙绠＄悊鍦板潃搴斿拰鍐呯綉鎺ュ彛鍦板潃鍦ㄥ悓涓�缃戞锛?/p>
C
锛?/p>
Management Services:
鎵撳紑鐩稿簲鐨勭鐞嗘湇鍔★紝浠ユ柟渚胯繙绋嬬鐞嗐�?/p>
D
锛?/p>
O
ther services:
鍏佽
ping
锛屾柟渚挎祴璇曞拰缁存姢銆?/p>
瀹氫箟澶栫綉鎺ュ彛锛?/p>
Network > Interfaces > Edit (
瀵逛簬
ethernet0/3):
淇敼绾㈢嚎閮ㄥ垎锛岀劧鍚庡崟鍑?/p>
Apply
:
A.Zone Name:
杩欐槸瀹氫箟澶栭儴鎺ュ彛锛屾墍浠ュ簲璇ュ湪
Untrust
瀹夊叏鍖烘
B.Static IP :
鎴戜滑鍋氱殑鏄潤鎬?/p>
IP
鍦板潃鐨勫疄楠岋紙绠＄悊鍦板潃搴斿拰鍐呯綉鎺ュ彛鍦板潃鍦ㄥ悓涓�缃戞锛?/p>
C.Management Services:
鏍规嵁闇�瑕佹墦寮�鐩稿簲鐨勭鐞嗘湇鍔★紝浠ユ柟渚胯繙绋嬬鐞嗐�?/p>
D.Other services:
鍏佽
ping
锛屾柟渚挎祴璇曞拰缁存姢銆?/p>
瀹氫箟閫氶亾鎺ュ彛锛?/p>
Network > Interfaces > New Tunnel IF:
淇敼绾㈢嚎閮ㄥ垎锛岀劧鍚庡崟鍑?/p>
OK
: