Juniper SSG140, Руководство по установке и настройке оборудования

Страница: 27 / 60

Basic Device Configuration
„ 27
Chapter 3: Configuring the Device
Administrative Access
By default, anyone on your network who knows the login and password can
manage your device.
To configure a device to be managed only from a specific host on your network:
WebUI
Configuration > Admin > Permitted IPs: Enter the following, then click Add :
IP Address/Netmask: ip_addr/mask
CLI
set admin manager-ip ip_addr/mask
save
Interface IP Address
The ethernet0/0 interface has the default IP address 192.168.1.1/24 and is
preconfigured for management services. You can configure the device using a
management service such as Telnet by connecting a workstation to the ethernet0/0
interface. The workstation must have an IP address in the 192.168.1.1/24 subnet.
To change the default interface IP address on the device:
WebUI
Network > Interfaces > Edit (for ethernet0/0): Enter the following, then click
OK :
IP Address/Netmask: ip_addr / mask
CLI
set interface ethernet0/0 ip ip_addr / mask
save
Management Services
ScreenOS provides services for configuring and managing a device, such as SNMP,
SSL, and SSH, which you can enable on a per-interface basis. You cannot configure
WAN interfaces for management services.
To configure the management services for the ethernet0/0 interface:
WebUI
Network > Interfaces > Edit (for ethernet0/0): Under Management Services ,
select or clear the management services you want to use on the interface, then
click
Apply .
CLI
set interface eth0/0 manage web
unset interface eth0/0 manage snmp
save