Inhaltszusammenfassung zur Seite Nr. 1
NETSCREEN-5000 SERIES
User’s Guide
Version 5.0 P/N 093-1489-000 Rev. A
Inhaltszusammenfassung zur Seite Nr. 2
Copyright Notice Copyright © 2004 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, NetScreen, NetScreen Technologies, GigaScreen, and the NetScreen logo are registered trademarks of Juniper Networks, Inc. NetScreen-5GT, NetScreen-5XP, NetScreen-5XT, NetScreen-25, NetScreen-50, NetScreen-100, NetScreen-204, NetScreen-208, NetScreen-500, NetScreen-5200, NetScreen-5400, NetScreen-Global PRO, NetScreen-Global PRO Express, NetScreen-Remote Security Client, N
Inhaltszusammenfassung zur Seite Nr. 3
Language Contents English .....................................................................................................................1 French ...................................................................................................................53 NetScreen-5000 Series iii
Inhaltszusammenfassung zur Seite Nr. 4
Language Contents iv User’s Guide
Inhaltszusammenfassung zur Seite Nr. 5
Table of Contents Preface....................................................................................................................1 Guide Organization .................................................................................... 1 Command Line Interface (CLI) Conventions ............................................... 2 Juniper Networks NetScreen Publications ................................................... 2 Chapter 1 Overview ..............................................
Inhaltszusammenfassung zur Seite Nr. 6
Table of Contents Performing Initial Connection and Configuration .....................................25 Establishing a Terminal Emulator Connection................................................ 25 Upgrading the Firmware During the Boot Process ......................................... 26 Changing Your Admin Name and Password ................................................. 27 Setting Port and Interface IP Addresses ......................................................... 27 Viewing Curren
Inhaltszusammenfassung zur Seite Nr. 7
Status LED States ....................................................................................... 47 Interpreting Status LEDs for the Management Modules .................................47 Interpreting Status LEDs for the Secure Port Module .......................................48 Interpreting Ethernet Port Status LEDs for All Modules .....................................48 Power Supply LEDs .................................................................................... 49 Interpre
Inhaltszusammenfassung zur Seite Nr. 8
Table of Contents viii User’s Guide
Inhaltszusammenfassung zur Seite Nr. 9
Preface The Juniper Networks NetScreen-5000 Series consists of purpose-built, high-performance security systems that provide IPSec VPN and firewall services for large-scale carrier, enterprise, and data-center networks. Built around NetScreen’s third-generation ASIC technology and distributed system architecture, the NetScreen-5000 Series offers excellent scalability and flexibility. The NetScreen-5000 Series includes the following device models: • The NetScreen-5200, a chassis-based, two-sl
Inhaltszusammenfassung zur Seite Nr. 10
Preface COMMAND LINE INTERFACE (CLI) CONVENTIONS The following conventions are used when presenting the syntax of a command line interface (CLI) command: • Anything inside square brackets [ ] is optional. • Anything inside braces { } is required. • If there is more than one choice, each choice is separated by a pipe ( | ). For example, set interface { ether1/1 | ether1/2 | ether2/2 } manage means “set the management options for the ether1/1, ether1/2, or ether2/2 interface”. • Variables appe
Inhaltszusammenfassung zur Seite Nr. 11
Chapter 1 Overview 1 This chapter provides detailed descriptions of the NetScreen-5000 Series, modules, power supplies, and fan assemblies. Topics explained in this chapter include: • “NetScreen-5000 Series” on page 4 – “NetScreen-5200” on page 4 – “NetScreen-5400” on page 4 • “Power Supplies” on page 5 – “NetScreen-5200 Power Recommendations” on page 6 – “NetScreen-5400 Power Recommendations” on page 6 – “The DC Power Supply” on page 6 – “The AC Power Supply” on page 7 • “Fan Modules” on page
Inhaltszusammenfassung zur Seite Nr. 12
Chapter 1 Overview NETSCREEN-5000 SERIES This section describes the NetScreen-5000 Series, which currently includes the NetScreen-5200 and the NetScreen-5400. NetScreen-5200 The NetScreen-5200 is a chassis-based, two-slot network security device. Slot 1 is for the management module and Slot 2 is for the Secure Port Module (SPM). The device has two hot-swappable power supplies for power redundancy and a removable fan module. The figure below shows a NetScreen-5200 with a management module in s
Inhaltszusammenfassung zur Seite Nr. 13
Power Supplies POWER SUPPLIES The NetScreen-5000 Series can use two kinds of power supplies: • Alternating Current (AC) Power Supply • Direct Current (DC) Power Supply The slots for these power supplies are located in the back of the NetScreen-5200 and on the front of the NetScreen-5400. Note: You can order a NetScreen-5000 Series that runs on DC power. For DC-powered units, the power supply has a DC terminal block with three sockets. When two or more power supplies are in service, they share
Inhaltszusammenfassung zur Seite Nr. 14
Chapter 1 Overview NetScreen-5200 Power Recommendations Although the NetScreen-5200 can run with one power supply, it is advisable to install both. This practice minimizes the likelihood of system failure due to individual power supply failure. When either power supply fails, the Alarm LED on the management module glows red. If both are operational, the Alarm LED is off. For more information on power supply LEDs, see Appendix B, Port Descriptions and LED Status. NetScreen-5400 Power Recommen
Inhaltszusammenfassung zur Seite Nr. 15
Fan Modules The AC Power Supply The AC power supply weighs about three pounds. The faceplate contains a power LED, a power switch, a male power outlet, and a cooling fan vent. The figure below shows the NetScreen-5200 AC power supply. Thumbscrew Power LED Male Power Outlet Fuse Power Switch FAN MODULES The NetScreen-5200 has a three-fan module and the NetScreen-5400 has a two-fan module. You can access the fan module from the left front side of each chassis. • To remove the NetScreen-5200 fa
Inhaltszusammenfassung zur Seite Nr. 16
Chapter 1 Overview NETSCREEN-5000 MODULES The NetScreen-5000 Series device supports two module types: • NetScreen-5000 management modules • NetScreen-5000 Secure Port Modules (SPMs) The following table shows the modules supported by each slot. slot 1 slot 2 slot 3 slot 4 NetScreen-5200 Management Module Secure Port Module N/A N/A NetScreen-5400 Management Module Secure Port Module Secure Port Module Secure Port Module Management Modules The management module provides general-purpose CPU delivery
Inhaltszusammenfassung zur Seite Nr. 17
NetScreen-5000 Modules CPU Utilization LEDs Compact Flash Slot Management Port High Availability Ports Status Flash HA Alarm Power Console Modem LED LED LED LED LED Port Port The 5000-M2 Management Module The 5000-M2 is based around powerful, dual 1GHz PowerPC CPUs, which assist other system elements, primarily with non-flow related tasks. The 5000-M2 management module provides overall management and control of the system. Although it performs system management, the primary function of t
Inhaltszusammenfassung zur Seite Nr. 18
Chapter 1 Overview Secure Port Modules Secure Port Modules (SPMs) perform general packet processing and device connection tasks for devices that communicate with the NetScreen-5000 Series. These modules are based around the GigaScreen-II ASIC. SPMs handle packets as they enter and exit the system, providing packet parsing, classification, and flow-level processing. SPMs also provide encryption, decryption, Network Address Translation (NAT), and session lookup features. When packets require
Inhaltszusammenfassung zur Seite Nr. 19
NetScreen-5000 Modules The 5000-2G24FE SPM The 5000-2G24FE Secure Port Module (SPM) deploys two 1-Gigabit Ethernet ports and 24 FE ports with up to 2 Gbps of firewall and up to 1 Gbps of VPN process capacity. This module is capable of supporting a total of six aggregate interfaces. This total consists of one aggregate interface for the two 1-Gigabit ports, and five aggregate interfaces for the 24 10/100 Ethernet ports. Only similar ports can be aggregated together. You cannot aggregate a Gi
Inhaltszusammenfassung zur Seite Nr. 20
Chapter 1 Overview 12 User’s Guide
