NetScreen Technologies NetScreen-10 Series, Руководство по установке

Страница: 36 / 48

&KDSWHU&RQILJXULQJWKH1HW6FUHHQIRUWKH)LUVW7LPH
1HW6FUHHQ
5RXWH0RGH
In Route mode, the NetScreen device routes traffic between different interfaces
without performing NAT; that is, the source address and port number in the IP
packet header remain unchanged as it traverses the NetScreen device. Unlike
NAT, the hosts on the Trusted side must have public IP addresses, and you do not
need to establish Mapped and Virtual IP addresses to allow sessions initiated on
the Untrusted side to reach hosts on the Trusted side. Unlike Transparent mode,
the Trusted and Untrusted interfaces are on different subnets.
With the NetScreen device operating in Route mode (or Transparent mode), you
do not need to set up Virtual or Mapped IPs for servers in the DMZ; the servers
only require Internet-routable IP addresses. Using Route mode for the Trusted
side likewise eliminates the need to create Virtual or Mapped IPs.
,QWHUIDFH6HWWLQJV
For Route mode, define the following interface settings, where <a.b.c.d> and
<e.f.g.h> represents numbers in an IP address, <A.B.C.D> represents the
numbers in a subnet mask, and <number> represents the bandwidth size in kbps:
Trusted IP: <a.b.c.d>
Subnet Mask: <A.B.C.D>
Default Gateway: <e.f.g.h>
Manage IP: <i.j.k.l>
Traffic Bandwidth
a
: <number>
Route: (select)
b
Untrusted IP: <a.b.c.d>
Subnet Mask: <A.B.C.D>
Default Gateway: <e.f.g.h>
Manage IP: <i.j.k.l>
Traffic Bandwidth
*
: <number>
DMZ IP: <a.b.c.d>
Subnet Mask: <A.B.C.D>
Default Gateway: <e.f.g.h>
Manage IP: <i.j.k.l>
Traffic Bandwidth
*
: <number>
Web Management System IP: <a.b.c.d>
Port: <port_number>
c