Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 155 / 1026

•
Port Mode Summary on page 110
• Changing the Port Mode on page 111
Trust-Untrust Port Mode
Trust-Untrust mode is the default port mode. See Figure 25 on page 105 for port, interface,
and zone bindings.
Figure 25: Trust-Untrust Port Mode Bindings
This mode provides the following bindings:
•
Binds the Untrusted Ethernet port to the Untrust interface, which is bound to the Untrust
security zone.
• Binds the Modem port to the serial interface, which you can bind as a backup interface
to the Untrust security zone.
•
Binds the Ethernet ports 1 through 4 to the Trust interface, which is bound to the Trust
security zone.
Home-Work Port Mode
Home-Work mode binds interfaces to the Untrust security zone and to Home and Work
security zones. The Home and Work zones enable you to segregate users and resources
in each zone. In this mode, default policies permit traffic flow and connections from the
Work zone to the Home zone, but do not permit traffic from the Home zone to the Work
zone. By default, there are no restrictions for traffic from the Home zone to the Untrust
zone. See Figure 26 on page 105 for port, interface, and zone bindings.
Figure 26: Home-Work Port Mode Bindings
This mode provides the following bindings:
105 Copyright © 2010, Juniper Networks, Inc.
Chapter 4: Adding Devices