Juniper Networks SSG 20 Backup Untrust Interface Configuration, Basic Wireless Configuration

Page 37

Backup Untrust Interface Configuration

The SSG 20 device allows you to configure a backup interface for untrust failover. To set a backup interface for untrust failover, perform the following steps:

1.Set the backup interface in the Null security zone with the unset interface interface [port interface] CLI command.

2.Bind the backup interface to the same security zone as the primary interface with the set interface interface zone zone_name CLI command.

NOTE: The primary and backup interfaces must be in the same security zone. One primary interface has only one backup interface, and one backup interface has only one primary interface.

To set the ethernet0/4 interface as the backup interface to the ethernet0/0 interface, use the WebUI or CLI as follows:

WebUI

Network > Interfaces > Backup > Enter the following, then click Apply.

Primary: ethernet0/0

Backup: ethernet0/4

Type: track-ip (select)

CLI

unset interface bgroup0 port ethernet0/4 set interface ethernet0/4 zone untrust

set interface ethernet0/0 backup interface ethernet0/4 type track-ip save

Basic Wireless Configuration

This section provides information for configuring the wireless interface on the SSG 20-WLAN device. Wireless networks consist of names referred to as Service Set Identifiers (SSIDs). Specifying SSIDs allows you to have multiple wireless networks reside in the same location without interfering with each other. An SSID name can have a maximum of 32 characters. If a space is part of the SSID name string, then the string must be enclosed with quotation marks. Once the SSID name is set, more SSID attributes can be configured.To use the wireless local area network (WLAN) capabilities on the device, you must configure at least one SSID and bind it to a wireless interface.

The SSG 20-WLAN device allows you to create up to 16 SSIDs, but only 4 of them can be used simultaneously. You can configure the device to use the 4 SSIDs on either one of the transceivers or split the use on both (for example, 3 SSIDs assigned to WLAN 0 and 1 SSID assigned to WLAN 1.) Use the set interface wireless_interface wlan {0 1 both} CLI command to set the radio transceivers on the SSG 20-WLAN device.

Basic Wireless Configuration „ 37

Image 37
Contents SSG 20 Hardware Installation and Configuration Guide Copyright Notice Table of Contents Appendix B Initial Configuration Wizard About This Guide WebUI Conventions OrganizationCLI Conventions Navigational Path and Configuration SettingsObtaining Documentation and Technical Support Hardware Overview Port and Power Connectors System Status LEDs Front PanelStatus LED Descriptions Name Color Name Color Status Description LAN Port LEDs Name Color Status Description Port DescriptionsLink TX/RXMini PIMs for the SSG Mini Physical Interface Module Port DescriptionsMini PIM LED States on the SSG Type Name Color Description Back Panel Power AdapterRadio Transceivers Grounding Lug USB Port Antennae TypesInstalling and Connecting the Device Before You Begin Installing EquipmentSSG 20 Front-mount Connecting the Power Connecting Interface Cables to a DeviceConnecting a Device to an Untrusted Network Connecting a Device to a NetworkSerial AUX/Console Ports Connecting Mini PIMs to an Untrusted NetworkMicrofilter and Splitter on Your Network Connection Connecting a Device to an Internal Network or a WorkstationWireless Antennae Configuring the Device Using a Console Connection Accessing a DeviceUsing the WebUI WebUI Login Prompt Using TelnetDefault Physical Interface to Zone Bindings Port Label Default Device SettingsDMZ Interface Zone Wireless and Logical Interface BindingsRoot Admin Name and Password Basic Device ConfigurationBridge Group Interfaces Date and TimeManagement Services Administrative AccessHostname and Domain Name Default RouteManagement Interface Address Basic Wireless Configuration Backup Untrust Interface ConfigurationDefault SSG 20-WLAN Configuration WPA-PSK Wireless Authentication and Encryption OptionsWPA WPA2-PSKActivate wireless changes ADSL2/2+ Interface Mini PIM ConfigurationVirtual Circuits PPPoE or PPPoA Static IP Address and Netmask T1 Interface Isdn InterfaceE1 Interface Modem Interface Verifying External Connectivity Basic Firewall ProtectionsResetting a Device to Factory Defaults Page Required Tools and Parts Servicing the DeviceReplacing a Mini-Physical Interface Module Removing a Mini PIM Removing a Blank FaceplateRemoving a Mini PIM Installing a Mini PIMBottom of Device Upgrading MemoryUnlocking the Memory Module 56 „ Upgrading Memory Specifications Electrical PhysicalEnvironmental Tolerance Certifications SafetyEMC Emissions EMC ImmunityRJ-45 Connector Pinouts Name Description ConnectorsGND DSRDCD DB-9 Connector Pinouts Name DescriptionDTR RTSPage Initial Configuration Wizard Rapid Deployment Window Administrator Login WindowPhysical Interface Window Wlan Access Point WindowADSL2/2+ Interface Window Adsl Interface Configuration WindowVPI/VCI Fields in Adsl Interface Configuration Window DescriptionT1 Physical Layer Tab Window T1 Interface WindowsFields in T1 Physical Layer Tab Window Description 70 „ Page Cisco Hdlc Option with Cisco Hdlc Tab Window E1 Physical Layer Tab Window E1 Interface WindowsFields in E1 Physical Layer Tab Window Description Field Description Isdn Interface WindowsSPID1 Fields in Isdn Physical Layer Tab Window DescriptionSPID2 Page Eth0/0 Interface Untrust Zone Window 92 Modem Interface WindowEth0/1 Interface DMZ Zone Window Bgroup0 Interface Window Bgroup0 Interface Trust Zone WindowFields in Bgroup0 Interface Window Description Wireless0/0 Interface Trust Zone WindowInterface Summary Window Fields in Wireless0/0 Interface Window DescriptionSsid Physical Ethernet Dhcp Interface Window Wireless Dhcp Interface WindowConfirmation Window Confirmation WindowAdsl IndexVPI/VCI