Juniper NETSCREEN-ISG 2000, User Manual, Page: 37 / 114

Performing Initial Connection and Configuration
NetScreen-ISG 2000 31
Setting Port and Interface IP Addresses
Through the CLI, you can execute commands that set IP address and subnet mask values
for most of the physical interfaces. Use the CLI
save command to store your
configuration.
Viewing Current Interface Settings
To view current interface settings:
get interface
This command displays current port names, IP addresses, MAC addresses, and other
useful information.
Setting the IP Address of the Management Interface
The default IP address and subnet mask settings for the MGT interface are 192.168.1.1
and 255.255.255.0, respectively. If you do not want to use this default IP address, you
need to assign a new interface address that matches your current network. NetScreen
recommends using the
MGT interface exclusively for out of band management. To set the
IP address of the MGT port:
1. Choose an unused IP address within the current address range of your Local
Area Network.
2. To set the MGT port to this unused IP address:
set interface mgt ip ip_addr / mask
For example, to set the IP address and subnet mask of the MGT port to
10.100.2.183/16:
set interface mgt ip 10.100.2.183/16
3. To confirm the new port settings:
get interface mgt
Setting the IP Address for the Trust Zone Interface
The NetScreen-ISG 2000 usually communicates with your protected network through an
interface bound to the Trust zone. To allow an interface to communicate with internal
devices, you must assign it the IP address and subnet mask for your protected network.
To set up the ethernet3/8 interface to communicate with your trusted network:
1. Determine the IP address and subnet mask of your trusted network.
2. To bind the ethernet3/8 interface to the Trust zone:
set interface ethernet3/8 zone trust