Juniper SRX550, Hardware Manual

Page: 134 / 220

Table 33: Default Interface Configuration for the Services Gateway (continued)
Address
DHCP
State
Security
Zone Connector Interface Port Label
Server Trust RJ-45 ge-0/0/4 0/4
Server Trust RJ-45 ge-0/0/5 0/5
No default Configuration ge-0/0/6 0/6
ge-0/0/7 0/7
ge-0/0/8 0/8
ge-0/0/9 0/9
By default, the security policies and NAT rules in Table 34 on page 118 and Table 35 on page 118 are created
on the SRX Series security policies.
Table 34: Security Policies
Policy Action Destination Zone Source Zone
Permit Untrust Trust
Table 35: NAT Rule
NAT Action Destination Zone Source Zone
Source NAT to untrust zone
interface
Untrust Trust
For example, a common default firewall configuration includes the following assumptions:
•
The protected network is connected to the interfaces ge-0/0/1 (port 0/1) through interface ge-0/0/5
(port 0/5) in the trust zone.
•
Connectivity to the Internet is through the interface ge-0/0/0 (port 0/0) in the untrust zone.
•
The IP address of the ge-0/0/0 interface is assigned via DHCP.
NOTE: The interfaces ge-0/0/1 (port 0/1) through ge-0/0/5 interface (port 0/5) are a part of
the default VLAN. The protected hosts can be connected to any of the ports that are part of the
default VLAN.
118