Juniper Networks ISG 2000

NetScreen-ISG 2000 iii

Language Contents

English ..................................................................................................................... 1

French ................................................................................................................... 53

Contents

Main Copyright Notice FCC Statement Disclaimer Page Page Contents Page Preface GUIDE ORGANIZATION COMMAND LINE INTERFACE (CLI) CONVENTIONS JUNIPER NETWORKS NETSCREEN PUBLICATIONS Overview THE FRONT PANEL LED Dashboard The Front Panel NetScreen-ISG 2000 5 The LEDs in the dashboard are as follows: Interface Modules 10/100 Mbps Interface Module The Mini-GBIC Interface Connector Module Compact Flash { software | config } from { flash | slot1 filename } to { flash | slot1 filename } save config from flash to slot1 ns2000_config Management Interfaces High Availability Interfaces The Fan Module THE REAR PANEL Power Supplies The DC Power Supply The AC Power Supply Page Installing the Device GENERAL INSTALLATION GUIDELINES EQUIPMENT RACK MOUNTING Equipment Rack Installation Guidelines Equipment Rack Accessories and Required Tools Page Rear-and-Front Mount INSTALLING AND CONNECTING THE AC POWER SUPPLY INSTALLING AND WIRING A DC POWER SUPPLY Page Page Configuring the Device OPERATIONAL MODES Transparent Mode Route Mode THE NETSCREEN-ISG 2000 INTERFACES Configurable Interfaces The Ethernet Interfaces Interfaces to Change During Initial Configuration CONNECTING THE DEVICE TO A NETWORK Connecting the NetScreen-ISG 2000 as a Single Security System Connecting the NetScreen-ISG 2000 for High Availability Page Configuring HA Ports Master Unit Backup Unit Switches P ERFORMING INITIAL CONNECTION AND C Establishing a Terminal Emulator Connection set console timeout number Changing Your Admin Name and Password set admin name name_str set admin password pswd_str Setting Port and Interface IP Addresses Viewing Current Interface Settings set interface ethernet3/8 zone trust get interface Setting the IP Address of the Management Interface Setting the IP Address for the Untrust Zone Interface Allowing Outbound Traffic CONFIGURING THE DEVICE FOR TELNET AND WEBUI SESSIONS Starting a Console Session Using Telnet Starting a Console Session Using Dialup Establishing a WebUI Management Session http://10.100.2.183 Configuring the Chassis Alarm set chassis audible-alarm string get chassis Using CLI Commands to Reset the Device Page Servicing the Device R EMOVING AND INSERTING INTERFACE M Removing Interface Modules Inserting Interface Modules INSTALLING POWER SUPPLIES Wiring the DC Power Supplies Replacing a DC Power Supply Replacing an AC Power Supply REPLACING THE FAN MODULE Replacing the Fan Tray Filter CONNECTING AND DISCONNECTING GIGABIT ETHERNET C R EMOVING AND INSTALLING A MINI-GBIC T Page A Specifications NETSCREEN-ISG 2000 ATTRIBUTES ELECTRICAL SPECIFICATION E NEBS C SAFETY CERTIFICATIONS EMI C FCC class A, BSMI, CE class A, C-Tick, VCCI class A C The following table lists the RJ-45 connector pin out. Page Index A C D F Page Table des matires Page Prface ORGANISATION DU MANUEL CONVENTIONS RELATIVES LINTERFACE DE LIGNE DE PUBLICATIONS JUNIPER NETWORKS NETSCREEN Prsentation gnrale PANNEAU AVANT Panneau de commande diodes lectroluminescentes Panneau avant NetScreen-ISG 2000 57 Les DEL du panneau de commande se prsentent de la manire suivante : Page Modules dinterface Module dinterface 10/100 Mbps Module du connecteur dinterface mini-GBIC Compact Flash Interfaces de gestion Interfaces haute disponibilit Module de ventilation PANNEAU ARRIRE Blocs dalimentation Bloc dalimentation CC Bloc dalimentation CA Installation de lunit INSTRUCTIONS DINSTALLATION GNRALES INSTALLATION DE LA BAIE DQUIPEMENT Instructions dinstallation de la baie dquipement Outils requis et accessoires de la baie dquipement Page Montage avant et arrire INSTALLATION ET CONNEXION DU BLOC DALIMENTATION CA INSTALLATION ET CBLAGE DUN BLOC DALIMENTATION CC Page Page Configuration de lunit MODES DE FONCTIONNEMENT Mode Transparent Mode Route INTERFACES NETSCREEN-ISG 2000 Interfaces configurables Interfaces Ethernet Interfaces modifier au cours de la configuration initiale CONNEXION DE LUNIT UN RSEAU Connexion de NetScreen-ISG 2000 en tant que systme de scurit unique Page Connexion de NetScreen-ISG 2000 pour la fonction de haute disponibilit Page Configuration des ports HA Unit principale Unit de sauvegarde Commutateurs EXCUTION DE LA CONNEXION ET DE LA CONFIGURATION tablissement dune connexion dmulateur de terminaux set console timeout nombre Modification de votre nom et de votre mot de passe dadministrateur set admin name chane_nom set admin password chane_motdepasse Configuration des adresses IP de port et dinterface Affichage des paramtres dinterface actuels set interface ethernet3/8 zone trust get interface Configuration de ladresse IP de linterface de gestion Configuration de ladresse IP pour linterface de zone Untrust Autorisation du trafic sortant CONFIGURATION DE LUNIT POUR LES SESSIONS TELNET ET Dmarrage dune session de console laide de Telnet set console timeout nombre Dmarrage dune session de console laide dun appel commut tablissement dune session de gestion de linterface utilisateur graphique Web 10.100.2.183 http://10.100.2.183 Configuration de lalarme de chssis set chassis audible-alarm chane get chassis Utilisation des commandes dinterface de ligne de commande pour rinitialiser lunit Page Entretien de lunit RETRAIT ET RINSTALLATION DES MODULES DINTERFACE Retrait des modules dinterface Insertion des modules dinterface Page INSTALLATION DES BLOCS DALIMENTATION Raccordement des blocs dalimentation CC Remplacement dun bloc dalimentation CC Remplacement dun bloc dalimentation CA REMPLACEMENT DU BLOC DE VENTILATION Remplacement du filtre du bloc de ventilation CONNEXION ET DCONNEXION DES CBLES GIGABIT E RETRAIT ET INSTALLATION DUN TRANSMETTEUR MINI-GBIC A Spcifications ATTRIBUTS DE NETSCREEN-ISG 2000 SPCIFICATIONS LECTRIQUES SPCIFICATIONS ENVIRONNEMENTALES CERTIFICATIONS NEBS CERTIFICATIONS DE CONFORMIT CERTIFICATIONS EMI FCC classe A, BSMI, CE classe A, C-Tick, VCCI classe A C Le tableau suivant dtaille le brochage du connecteur RJ-45. Page Index NetScreen-ISG 2000 105 Index A B C D