Juniper NetScreen-25, Руководство пользователя

Страница: 23 / 36

Performing Initial Configuration Using the CLI
NetScreen-25 17
4. At the Password prompt, type
netscreen.
5. (Optional) By default, the console times out and terminates automatically after
10 minutes of idle time. To change the timeout value, execute the following
command:
set console timeout number
where number is the length of idle time, in minutes, before session termination.
To prevent automatic termination, specify a value of 0.
$OORZLQJ2XWERXQG7UDIILF
By default, the NetScreen-25 device does not allow inbound or outbound traffic, nor does
it allow traffic to or from the DMZ. You need to create access policies to permit specified
kinds of traffic in the directions you want. (You can also create access policies to deny and
tunnel traffic.)
The following access policy permits all kinds of outbound traffic from any point on the
Trust network to any point on the Untrust network.
set policy outgoing “inside any” “outside any” any permit
save
You can also use the Outgoing Policy Wizard in the WebUI management application to
create access policies for outbound traffic. See
“Accessing the Device With the WebUI” on
page 18 for information on accessing the WebUI application.
&KDQJLQJ<RXU$GPLQ1DPHDQG3DVVZRUG
Because all NetScreen products use the same admin name and password (netscreen), it
is highly advisable to change your admin name and password immediately. Enter the
following commands:
set admin name name_str
set admin password pswd_str
save
For information on creating different levels of administrators, see “Administration” in the
NetScreen Concepts & Examples ScreenOS Reference Guide.
Note: Use lowercase letters only. Both Username and Password are case-
sensitive.
Important! Your network might require a more restrictive policy than the one created in
the example above. The example is NOT a requirement for initial configuration.