Chapter 2 Configuring the Device
20
User’s Guide
The NetScreen device allows any type of traffic to the Internet that originates from
devices in your Trust zone, but does not allow any traffic that originates in the Internet to
reach your network. You can configure additional restrictions; refer to
Additional Policies” on page 25
Configuring the ADSL Interface
Your network uses the ADSL interface “adsl1” on the NetScreen device to connect to the
service provider’s network through an Asynchronous Transfer Mode (ATM) virtual circuit.
You can configure additional virtual circuits by creating ADSL subinterfaces (see
Virtual Circuits to an ADSL Interface” on page 20
In the WebUI, navigate to the Network > Interfaces page to see a list of the current
interfaces on the NetScreen device. If you are using a Telnet or Console session, enter the
CLI command get interface. You should see that the adsl1 interface is bound to the
Untrust zone. If you used the Initial Configuration Wizard to configure the device, then
there may be an IP address and netmask already assigned to the adsl1 interface.
You must configure the adsl1 interface to enable the NetScreen device to connect to the
service provider’s network. To do this, you must obtain the following information from
your service provider:
•
Virtual Path Identifier and Virtual Channel Identifier (VPI/VCI) values
•
Asynchronous Transfer Mode (ATM) Adaptation Layer 5 (AAL5) multiplexing
method, which can be one of the following:
–
Virtual Circuit (VC)-based multiplexing, in which each protocol is carried
over a separate ATM virtual circuit
–
Logical Link Control (LLC) encapsulation, which allows several protocols
to be carried on the same ATM virtual circuit (this is the default
multiplexing method)
•
User name and password assigned by the service provider for connection to the
service provider’s network using either the Point-to-Point Protocol over Ethernet
(PPPoE) or Point-to-Point Protocol over ATM (PPPoA)
•
Authentication method, if any, provided for the PPPoE or PPPoA connection
•
Optionally, a static IP address and netmask value for your network
Adding Virtual Circuits to an ADSL Interface
To add virtual circuits, you create sub-interfaces to the ADSL interface. You can create up
to ten ADSL subinterfaces. For example, to create a new subinterface adsl1.1 that is
bound to the user-defined zone named “Corp1”:
Note: If you do not want to use the ADSL interface, then you can bind it to the Null zone
with the set interface adsl1 zone null command. If you use the Initial Configuration
Wizard to configure the device, you can choose to not use the ADSL interface as the default
interface to the Untrust zone.
