can't set ethernet1 zone to v1-trust 1

[Oh]

Hi. I'm newbie in netscreen. i try to config my 5GT to working in transparent mode. I follow the guide. But when I run command "set interface ethernet1 zone v1-trust", I cannot change it. The only zone selection is "trust". Can somebody help me? Thanks

 

[13sio]

In command line interface, you can get help by '?', e.g.,

set interface ?

all available interfaces will be shown

set interface trust zone ?

all available zones in trust interface will be shown. AFAIK, NS-5GT has no default interface named ethernet1.

 

[Oh]

the result of 'set interface ?'
ethernet1
ethernet2
ethernet3
serial
tunnel
loopback
vlan1

the result of 'get zone'
name default-IF
trust --- ethernet3
untrust -- ethernet1
...
v1-trust -- null
v1-untrust -- v1-trust

how can I make it working? thanks

 

[13sio]

What's your firewall model? i only have little experience of NS-5GT.

 

[Oh]

The model is NS-5GT. It's doesn't like what said in configuration documentation.

 

[13sio]

Hope the following helps

http://5gt.support.juniper.safeharbor.com/knowbase/root/public/ns4434.htm?

 

[Oh]

Yes. I followed this doc. but I cann't run it in my 5GT.

 

[Njetscreamer]

If this is an out of the box Screen then do the following, as the boxes are hierarchical. Hence as you have 192.168.1.1/24 as the default ip address on e1, e1 is bound to zone trust, you must first remove the ip before you can alter zone.

NS5GT>unset int e1 ip
NS5GT>set int e1 zone v1-trust
NS5GT>set int e3 zone v1-untrust

and you should get a message stating you are running pure L2-Mode.

Have fun with the Netscreen oop Juniper NetScreen.

Kind regards

Njetscreamer

 

[Njetscreamer]

Oh,

sorry my mistake,

you need to be in trust untrust mode first so you need to

5gt> exec port trust-untrust

allow it to reboot and follow the last post.

Kind regards

Njetscreamer

 

[Oh]

That works! Thanks a lot. I remember set it working as trust-untrust mode in WEB but I don't know why it still working in Extended mode. Thank you, Njetscreamer!

 

[Njetscreamer]

No worries Oh,

have fun with the box

Regards

Njetscreamer