Juniper NETWORK AND SECURITY MANAGER 2010.3, Administration Manual

Page: 158 / 1016

Figure 29: Trust-Untrust-DMZ Port Mode Bindings
This mode provides the following bindings:
•
Binds the Ethernet ports 1 and 2 to the ethernet1 interface, which is bound to the Trust
security zone.
• Binds the Ethernet ports 3 and 4 to the ethernet2 interface, which is bound to the DMZ
security zone.
•
Binds the Untrusted Ethernet port to the ethernet3 interface, which is bound to the
Untrust security zone.
• Binds the Modem port to the serial interface, which you can bind as a backup interface
to the Untrust security zone.
Trust/Untrust/DMZ (Extended) Mode
Trust/Untrust/DMZ (Extended) mode binds interfaces to the Untrust, Trust, and DMZ
security zones, allowing you to segregate web, email, or other application servers from
the internal network. See Figure 30 on page 108.
Figure 30: Extended Port-Mode Interface to Zone Bindings
Table 19 on page 108 provides the Extended mode interface-to-zone bindings.
Table 19: Extended Bindings
Zone Interface Port
Untrust Untrust Untrusted
Copyright © 2010, Juniper Networks, Inc. 108
Network and Security Manager Administration Guide