Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 649 / 1026

3.
Add the local user object. In the Object Manager, select User Objects > Local Users .
Click the Add icon and select User. The New Local User dialog box appears. Configure
the following, then click
OK .
•
For Name, enter jhansen .
•
For Color, select orange .
•
For Comment, enter reseller group .
• Select Enable, then select IKE .
• For IKE settings, enable User FQDN and enter the e-mail address
jhansen@company.com .
4.
Add a Local User Group. In the Object Manager, select User Objects > Local User
Groups . Click the Add icon to display the New Local User Group dialog box. Configure
the following, then click OK :
•
For Name, enter Reseller User Group .
• For Comment, enter Reseller VPN XAuth RADIUS .
•
For color, enter green .
•
Add jhansen as a member.
5.
Add a Network address object to represent the network used by Reseller group. In the
Object Manager, select
Address Objects , then click the Add icon and select Network .
The New Network dialog box appears. Configure the following, then click OK :
• For Name, enter reseller1 .
• For IP Address/Netmask, enter 10.2.2.0/24 .
• For color, select cyan .
•
For Comment, enter Reseller Group .
6.
Add an address object to represent the FTP Server. In the Object Manager, select
Address Objects , then click the Add icon and select Host. The New Host dialog box
appears. Configure the following, then click OK :
• For Name, enter rsl-svr1 .
•
For Color, select green .
• For Comment, enter FTP Server .
• Select IP, then enter the IP Address 10.1.1.5 .
7.
Add a NetScreen-208 security device named "Bozeman.” This is the device protects
the FTP server. Configure the Bozeman device with the following interfaces:
• Ethernet1 is the Trust IP (10.1.1.1/24) in the Trust zone.
•
Ethernet3 is the Untrust IP (2.2.2.2/24) in the Untrust zone.
599 Copyright © 2010, Juniper Networks, Inc.
Chapter 12: Configuring VPNs