Juniper 200 Series Bedienungsanleitung

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

Zur Seite of

Richtige Gebrauchsanleitung

Die Vorschriften verpflichten den Verkäufer zur Übertragung der Gebrauchsanleitung Juniper 200 Series an den Erwerber, zusammen mit der Ware. Eine fehlende Anleitung oder falsche Informationen, die dem Verbraucher übertragen werden, bilden eine Grundlage für eine Reklamation aufgrund Unstimmigkeit des Geräts mit dem Vertrag. Rechtsmäßig lässt man das Anfügen einer Gebrauchsanleitung in anderer Form als Papierform zu, was letztens sehr oft genutzt wird, indem man eine grafische oder elektronische Anleitung von Juniper 200 Series, sowie Anleitungsvideos für Nutzer beifügt. Die Bedingung ist, dass ihre Form leserlich und verständlich ist.

Was ist eine Gebrauchsanleitung?

Das Wort kommt vom lateinischen „instructio”, d.h. ordnen. Demnach kann man in der Anleitung Juniper 200 Series die Beschreibung der Etappen der Vorgehensweisen finden. Das Ziel der Anleitung ist die Belehrung, Vereinfachung des Starts, der Nutzung des Geräts oder auch der Ausführung bestimmter Tätigkeiten. Die Anleitung ist eine Sammlung von Informationen über ein Gegenstand/eine Dienstleistung, ein Hinweis.

Leider widmen nicht viele Nutzer ihre Zeit der Gebrauchsanleitung Juniper 200 Series. Eine gute Gebrauchsanleitung erlaubt nicht nur eine Reihe zusätzlicher Funktionen des gekauften Geräts kennenzulernen, sondern hilft dabei viele Fehler zu vermeiden.

Was sollte also eine ideale Gebrauchsanleitung beinhalten?

Die Gebrauchsanleitung Juniper 200 Series sollte vor allem folgendes enthalten:
- Informationen über technische Daten des Geräts Juniper 200 Series
- Den Namen des Produzenten und das Produktionsjahr des Geräts Juniper 200 Series
- Grundsätze der Bedienung, Regulierung und Wartung des Geräts Juniper 200 Series
- Sicherheitszeichen und Zertifikate, die die Übereinstimmung mit entsprechenden Normen bestätigen

Warum lesen wir keine Gebrauchsanleitungen?

Der Grund dafür ist die fehlende Zeit und die Sicherheit, was die bestimmten Funktionen der gekauften Geräte angeht. Leider ist das Anschließen und Starten von Juniper 200 Series zu wenig. Eine Anleitung beinhaltet eine Reihe von Hinweisen bezüglich bestimmter Funktionen, Sicherheitsgrundsätze, Wartungsarten (sogar das, welche Mittel man benutzen sollte), eventueller Fehler von Juniper 200 Series und Lösungsarten für Probleme, die während der Nutzung auftreten könnten. Immerhin kann man in der Gebrauchsanleitung die Kontaktnummer zum Service Juniper finden, wenn die vorgeschlagenen Lösungen nicht wirksam sind. Aktuell erfreuen sich Anleitungen in Form von interessanten Animationen oder Videoanleitungen an Popularität, die den Nutzer besser ansprechen als eine Broschüre. Diese Art von Anleitung gibt garantiert, dass der Nutzer sich das ganze Video anschaut, ohne die spezifizierten und komplizierten technischen Beschreibungen von Juniper 200 Series zu überspringen, wie es bei der Papierform passiert.

Warum sollte man Gebrauchsanleitungen lesen?

In der Gebrauchsanleitung finden wir vor allem die Antwort über den Bau sowie die Möglichkeiten des Geräts Juniper 200 Series, über die Nutzung bestimmter Accessoires und eine Reihe von Informationen, die erlauben, jegliche Funktionen und Bequemlichkeiten zu nutzen.

Nach dem gelungenen Kauf des Geräts, sollte man einige Zeit für das Kennenlernen jedes Teils der Anleitung von Juniper 200 Series widmen. Aktuell sind sie genau vorbereitet oder übersetzt, damit sie nicht nur verständlich für die Nutzer sind, aber auch ihre grundliegende Hilfs-Informations-Funktion erfüllen.

Inhaltsverzeichnis der Gebrauchsanleitungen

  • Seite 1

    N ET S CREEN -200 S ERIES User’s Guide Version 5.0 P/N 093-1253-000 Rev. C[...]

  • Seite 2

    Copyright Notice Copyright © 2007 Juniper Networks , Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, NetScreen, Ne tScreen Techn ologies, GigaScr een, and the Ne tScreen log o are registered trademarks of Juniper Netw orks, Inc. Ne tScreen-5GT, NetScreen-5XP, NetScreen-5XT, NetScreen-25, NetScreen-50, NetScreen-100, NetScree[...]

  • Seite 3

    NetScreen-200 Series iii Contents Preface ................ .............. .............. .............. .............. .............. .............. .............. ...... ............. .......... v Guide Organization ..................................... ................................ ............................. v Command Line Interface (CLI) C[...]

  • Seite 4

    Contents iv User’s Guide Establishing a Termin al Emulator Connection ................................... ............. 22 Changing Your Admin Name an d Password ........................................... ...... 23 Setting Port and Interface IP Addresses ......................................................... 23 Viewing Current Interface Setti[...]

  • Seite 5

    NetScreen-200 Series v Preface The Juniper Networks NetScreen-200 Series consists of vers atile, purpose-built, high- performance security system s that provide IPSec VPN and firewall services for medium and large enterprise offices, e-business sites, data centers, and carrier infrastructures. The NetScreen-200 Series includes the following device [...]

  • Seite 6

    Preface vi User’s Guide C OMMAND L INE I NTERFACE (CLI) C ONVENTIONS The following conventions are used when pr esenting the syntax of a command line interface (CLI) comman d: • Anything inside square brackets [ ] is optional. • Anything insi de braces { } is required. • If there is more than one choice, each choice is separ ated by a pipe [...]

  • Seite 7

    NetScreen-200 Series 1 1 Chapter 1 Overview This chapter provides detail ed descriptions of the NetScr een-200 Series syst em devices and their components. Topics in this chapter include: • “NetScreen-200 Systems” on page 2 – “NetScreen-204 Device” on page 2 – “NetScreen-208 Device” on page 2 • “The Front Panel” on page 3 ?[...]

  • Seite 8

    Chapter 1 Overview 2 User’s Guide N ET S CREEN -200 S YSTEMS This NetScreen-200 Series currently includes the NetS creen-204 device and the NetScreen-208 device. NetScreen-204 Device The NetScreen-204 is a chassis-based, rack-mou ntable network security device with four ethernet 10/100 Base-T interface ports. Th e figure below shows a NetScreen-2[...]

  • Seite 9

    The Front Panel NetScreen-200 Series 3 T HE F RONT P ANEL The features shared in common by Net Scre en-204 a nd NetScre en-208 devices include: • A System Status LED display • An Asset Recovery Pinhole • A Console port • A Modem port • A Compact Flash Card Slot • Ethernet interfaces System Status LED Display The front panel of each NetS[...]

  • Seite 10

    Chapter 1 Overview 4 User’s Guide Asset Recovery Pinhole The Asset Recovery Pinhole is a button that resets the device to its original default settings. To use this button, i nsert a stiff wire (such as a straightened pa per clip) into the pinhole. Alarm System Alarm red Critical alarm: • Failure of hardware component or software module (such a[...]

  • Seite 11

    The Front Panel NetScreen-200 Series 5 Console and Modem Ports The Console port is an RJ-45 serial console port connector, for vt100 terminal emulator programs to perform local conf iguration and administra tion. The Modem port is an RJ-45 serial console po rt connector, for establishing remote console sessions using dialup connections throug h a 9[...]

  • Seite 12

    Chapter 1 Overview 6 User’s Guide Ethernet Interfaces Each Ethernet port is a 10/100 auto-sensing interface with two link LEDs. The left LED indicates network traffic, and the right LED indicates an ac tive network link. T HE R EAR P ANEL The figure below shows the rear panel of a NetScreen -200 Series device (with an AC power suppl y). Power Sup[...]

  • Seite 13

    The Rear Panel NetScreen-200 Series 7 Power Fuse Each NetScreen-200 Series device uses a 2.5 Amp, slow-blow power fuse rated for 250 Volts. To replace a fuse on a NetScreen-200 Series device: 1. Take the device off-line by turning the power switch OFF and disconnecting the power cable. 2. Using a screwdriver, separate the lid of the external fuse c[...]

  • Seite 14

    Chapter 1 Overview 8 User’s Guide[...]

  • Seite 15

    NetScreen-200 Series 9 2 Chapter 2 Installing the Device This chapter describes how to install a device in an equi pment rack or on a desktop, and how to connect the device to other devices. Topics in this chapter include: • “General Instal lation Guid elines” on pa ge 10 • “Performing Equipment-Rack Installation” on page 10 – “Equi[...]

  • Seite 16

    Chapter 2 Installing the Device 10 User’s Guide G ENERAL I NSTALLATION G UIDELINES Observing the following pre cautions can p r event injuries, equi p ment failur es and shutdowns. • Never assume that the power su pply is disconnected from a power source. Always check first. • Room temperature might not be sufficie nt to keep equipment at acc[...]

  • Seite 17

    Connecting the Power NetScreen-200 Series 11 There are two ways to rack-mount the NetScree n-200 Series: • Front mount • Mid-mount Front Mount To front mount the NetScreen-200 Seri es device on your equipment rack: 1. Screw the front mount bracket to the side of the chassis. 2. Screw the front mount bracket to t he rack, as shown below. Mid-Mou[...]

  • Seite 18

    Chapter 2 Installing the Device 12 User’s Guide W IRING A DC P OWER S UPPLY The DC power supply , ON/OFF switch, groundi n g screw, and termi nal blocks, are located in the back of the chassi s of the powe r supply unit. To connect the DC power supply to a grou nding point at your site: 1. Remove the hex nut on the grounding screw. 2. Place the g[...]

  • Seite 19

    Connecting the NetScreen-200 Device to Other Devices NetScreen-200 Series 13 C ONNECTING THE N ET S CREEN -200 D EVICE TO O THER D EVICES To connect th e device, use the ethernet interfaces ( ethernet1 through ethern et4 on the NetScreen-204, or ethernet1 through ethernet8 on the NetScree n-208). The pu rpose of each interface depe nds up on the se[...]

  • Seite 20

    Chapter 2 Installing the Device 14 User’s Guide[...]

  • Seite 21

    NetScreen-200 Series 15 3 Chapter 3 Configuring the Device This chapter descri bes how to perform init ial configura tion on a NetScreen-200 Series device once yo u have mo unted it in a rack or desktop, pl ugged in the ne cessary cables, then turn the power ON. Topics in this chapter include: • “Operational Modes” on page 16 – “Transpare[...]

  • Seite 22

    Chapter 3 Configuring the Device 16 User’s Guide O PERATIONAL M ODES The NetScreen-200 Series devi ce supports two device modes: Transparent mode and Route mode. The default mode is Route. Transparent Mode In Transparent mode, the NetScr een-200 device operates as a Layer-2 bridge. Because the device cannot tran slate packet IP addres ses, it can[...]

  • Seite 23

    The NetScreen-200 Series Device Interfaces NetScreen-200 Series 17 T HE N ET S CREEN -200 S ERIES D EVICE I NTERFACES Each NetScreen-200 devi ce provides ethernet interfaces for access and connectivity. In addition, there are logica l (non-physical) in terfaces that perform special Layer-2 or management functions. The configurable interfaces avai l[...]

  • Seite 24

    Chapter 3 Configuring the Device 18 User’s Guide C ONNECTING THE D EVICE AS A S INGLE S ECURITY G ATEWAY There are many ways to connect a NetScre en-2 00 Series device to your network system. In most cases, the device serv es as a single security gateway that prot ects at least one LAN (usually connected to the de vice from a switch or a hub). Co[...]

  • Seite 25

    Connecting the Device as a Single Security Gateway NetScreen-200 Series 19 In the following example, a NetScreen-208 device connects to a protected LAN through ethernet1 (bound to the Trust security zo ne) and to a protected DMZ through ethernet2 (bound to the DMZ security zone). The devi ce connects externally to a router through ethernet3 (bound [...]

  • Seite 26

    Chapter 3 Configuring the Device 20 User’s Guide E STABLISHING AN HA C ONNECTION B ETWEEN D EVICES To assure continuous traffic flow in the event of system failure, you can cable and configure two NetScreen devices in a redu ndan t cluster. The devices propag ate all network, configuration and session information to each other. Should one device [...]

  • Seite 27

    Establishing an HA Connection Between Devices NetScreen-200 Series 21 To cable two NetScreen-200 Se ries devices together for HA and connect them to the network: 1. (Optional) Install the NetScreen -200 Seri es devices in an equipment rack (see “Equipment Rack Installa tion Guidelines” on page 10 ). 2. Make sure that all ON/OFF po wer supply sw[...]

  • Seite 28

    Chapter 3 Configuring the Device 22 User’s Guide Switches 11. Cable together the switches la beled “Switch 3” and “Switch 4.” 12. Cable together the switches labeled “Layer 3 switch 1” and “Lay er 3 switch 2.” 13. Cable the switches labeled “Layer 3 switch 1” and “Layer 3 switch 2” to routers. 14. Turn the power switch es [...]

  • Seite 29

    Performing Initial Connection and Configuration NetScreen-200 Series 23 6. At the password prompt, type netscreen . 7. (Optiona l) By defau lt, the console tim e s out and terminates automatically after 10 minutes of idle time. To change this timeout interval, ex ecute the following command: set console timeout number where number is the length of [...]

  • Seite 30

    Chapter 3 Configuring the Device 24 User’s Guide Setting the IP Address of the Management Interface To make an interface work as the management interface, yo u must set the IP address and subnet mask to the same address range as your co mputer (or LAN). Use the CLI save command to save your configura tion changes. To configure the ethernet1 inter[...]

  • Seite 31

    Configuring the Device for Telnet and WebUI Sessions NetScreen-200 Series 25 Allowing Outbound Traffic By default, th e NetScreen -200 Series de vice does not allow inbound or outbound traffic, nor does it allow traffic to or from the DMZ. To permit (or deny) traffic, you must create access policies. The following CLI command creates an access po l[...]

  • Seite 32

    Chapter 3 Configuring the Device 26 User’s Guide 5. (Optiona l) By default, the console tim e s out and terminates automatically after 10 minutes of idle time. To change this timeout interval, ex ecute the following command: set console timeout number where number is the length of idle time in minute s before session termination . To prevent any [...]

  • Seite 33

    Configuring the Device for Telnet and WebUI Sessions NetScreen-200 Series 27 The NetScreen WebUI appl ication window app ears. Note: NetScreen-Security Manager 20 04 (NSM) and NetScreen Rapid Deployment (RD): If you are using NSM, you can optionally configure NetScreen appliances with RD . Refer to the Rapid Deployment Getting Started Guide for mor[...]

  • Seite 34

    Chapter 3 Configuring the Device 28 User’s Guide A SSET R ECOVERY If you lose the admin password, you can use on e of the following procedures to reset the NetScreen device to its default settings. This destroys any existing configurations, but restores access to the device. Using CLI Commands to Reset the Device To perform this operation, you ne[...]

  • Seite 35

    Asset Recovery NetScreen-200 Series 29 Using the Asset Recovery Pinhole to Reset the Device You can also reset the device and restore the fa ct ory default settings by pressing the asset recovery pinhole. To perform this operation, you nee d to make a console connection, as described in “Establishing a Terminal Emulator C onnection” on page 22 [...]

  • Seite 36

    Chapter 3 Configuring the Device 30 User’s Guide[...]

  • Seite 37

    NetScreen-200 Series A-I A Appendix A Specifications This appendix provid es general system specificatio ns for the NetScreen-200 Series devices. • “NetScreen-200 Attributes” on page A-II • “Electrical Specification” on page A-II • “Environmental” on page A-II • “Safety Certifications” o n page A-II • “EMI Certifications[...]

  • Seite 38

    Appendix A Specifications A-II User’s Guide N ET S CREEN -200 A TTRIBUTES Height: 1.73 inches (4 .4 cm) Depth: 10.8 inches (27.4 cm) Width: 17.5 inches (44.5 c m) Weight: 8 pounds (36 hg) E LECTRICAL S PECIFICATION AC voltage: 100-240 VAC +/- 10% DC voltage: -36 to -60 VD C AC Watts: 45 Watts DC Watts: 50 Watts Fuse Rating: 2.5Amps / 250Volts E N[...]

  • Seite 39

    Index NetScreen-200 Series IX-I Index A asset recovery 28 B back panel 6 C cables connections 19 power 19 RJ-45 connectors 17 RJ45 connectors 5 , 13 twisted pair 13 , 17 cabling network interfaces 25 power supply 21 changing login and password 23 changing timeout 23 , 26 compact flash card slot 5 configuration, multiple devices 19 connecting power [...]

  • Seite 40

    Index IX-II User’s Guide S session establishing 22 using a dialup connection 26 T transparent mode 16 V ventilation 10 viewing port settings 23[...]