Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Руководство администратора

Страница: 381 / 1026

7.
Enter the IP address of the multicast group. All IPv6 multicast addresses should have
a prefix of
ff00::/8.
The netmask field is unavailable for IPv6 multicast addresses
since the value is fixed and set to 8. NSM validates your entries and prompts a
correction in case of an error.
8.
Click OK to add the multicast group address.
Adding Static DNS Host Addresses
This ScreenOS 5.3 or later feature lets you create a static host name with multiple IP
addresses. You can use this feature to create dynamic addressing in NSM.
To add multiple static host addresses:
1.
In the navigation tree,
2.
Double-click the device you want to configure. The device must be running ScreenOS
5.3 or later.
3.
In the navigation tree of the new dialog box, select Network > DNS .
4.
Click Settings to open the Device Settings dialog box.
5.
Click the Add icon, enter the host name and host IP address, then click OK .
6.
Click OK to save the changes and close the dialog box.
Example: Using Static Addresses to Share a FW Policy
Static addresses allow two sites with different IP addresses to share a single firewall
policy. For example, each site might have a Web server, each with a different IP address.
If you define an address object using the hostname “webserver” and then using that
object in the firewall policy, the device will resolve the address object's hostname to the
correct IP for that device as defined by its static host entry.
1.
In the navigation tree, select Object Manager > Address Objects .
2.
Click the Add icon, then select Host to open the New Host dialog box.
3.
Enter the same name in the Name field that you entered for the Device host name in
the previous section. These values are case sensitive and must match exactly.
4.
Click OK to save the name and close the dialog box.
5.
Return to the navigation tree and select Security Policy .
6.
Click the Add icon and enter the security policy name, then click OK .
7.
Double-click the name of the security policy you just created.
8.
Right-click the value in the Source column or the Destination column.
9.
Select the address object you just created, click Add , then click OK . When the address
object is pushed to a device, the host name resolves dynamically. One policy can be
assigned to multiple devices.
331 Copyright © 2010, Juniper Networks, Inc.
Chapter 8: Configuring Objects