Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 637 / 1026

•
Ethernet1 is the Trust IP (10.2.2.1/24) in the Trust zone.
• Ethernet3 is the Untrust IP (2.2.2.2/24) in the Untrust zone.
2.
Create the address objects that you will use to create Protected Resources (for details
on creating or editing address objects,. If you imported a security device, the address
book objects configured on that device are automatically imported as Aaddress objects
into the NSM UI.
a. Add the Tokyo Trust LAN (10.1.1.0/24) as a network address object. In Address
Objects, click the Add icon and select Network . Configure the following, then click
OK :
• For Name, enter Tokyo Trust LAN.
•
For IP Address/Netmask, enter 10.1.1.0/24.
•
For Color, select magenta .
• For Comment, enter Tokyo Trust Zone .
b. Add the Paris Trust LAN (10.2.2.0/24) as a network address object. In Address
Objects, click the Add icon and select Network . Configure the following, then click
OK :
•
For Name, enter Paris Trust LAN.
• For IP Address/Netmask, enter 10.2.2.0/24.
• For Color, select magenta .
•
For Comment, enter Paris Trust Zone .
3.
Create the Tokyo Protected Resources object. In Protected Resources (under VPN
Manager), click the Add icon. Configure as shown in Figure 87 on page 588, then click
OK :
587 Copyright © 2010, Juniper Networks, Inc.
Chapter 12: Configuring VPNs