To Next Page

To Previous Page

ISG 2000 User’s Guide

8  Security Zones and Interfaces

Binding Interfaces to Zones

The ISG 2000 supports different types of interface modules in four interface module

bays. The leftmost interface in the module in the upper left bay is ethernet1/1. The

interface to the right of ethernet1/1 is ethernet1/2. If there are more interfaces in

that module, they are numbered ethernet1/3, ethernet1/4, and so on. As you can

see, the first number represents the position of the interface module in one of the

four bays, and the second number represents the position of the interface in that

module from left to right.

Figure 8: Interface Numbers

As you can see in the output from the get interface command below, none of the

interface module interfaces are prebound to a security zone. They are all in the Null

zone.

get interface

A - Active, I - Inactive, U - Up, D - Down, R - Ready

Interfaces in vsys Root:

Name IP Address Zone MAC VLAN State VSD

mgt 192.168.1.1/24 MGT 0010.db58.bb80 – D –

eth1/1 0.0.0.0/0 Null 0010.db58.bb87 – D –

eth1/2 0.0.0.0/0 Null 0010.db58.bb88 – D –

eth1/3 0.0.0.0/0 Null 0010.db58.bb89 – D –

eth1/4 0.0.0.0/0 Null 0010.db58.bb8a – D –

eth2/1 0.0.0.0/0 Null 0010.db58.bb9d – D –

eth2/2 0.0.0.0/0 Null 0010.db58.bb9e – D –

eth3/1 0.0.0.0/0 Null 0010.db58.bb8d – D –

eth3/2 0.0.0.0/0 Null 0010.db58.bb8e – D –

eth4/1 0.0.0.0/0 Null 0010.db58.bb81 – D –

eth4/2 0.0.0.0/0 Null 0010.db58.bb82 – D –

eth4/3 0.0.0.0/0 Null 0010.db58.bb83 – D –

eth4/4 0.0.0.0/0 Null 0010.db58.bb84 – D –

vlan1 0.0.0.0/0 VLAN 0010.db58.bb8f 1 D –

Interface Module Bays

e1/1 e1/2 e1/3 e1/4

e4/1 e4/2 e4/3 e4/4

e3/1 e3/2

e2/1 e2/2

Juniper ISG 2000 User Manual

Questions and Answers: