&KDSWHU&RQILJXULQJWKH'HYLFH
,QVWDOOHU·V*XLGH
23(5$7,21$/02'(6
The NetScreen-50 Series supports two operational modes, Transparent mode and Route
mode. The default mode is Transparent.
7UDQVSDUHQW0RGH
In Transparent mode, the NetScreen-50 device operates as a Layer-2 bridge. Because the
device cannot translate packet IP addresses, it cannot perform Network Address
Translation (NAT). Consequently, for the device to access the Internet, any IP address in
your trusted (local) networks must be routable and accessible from untrusted (external)
networks.
In Transparent mode, the IP addresses for the Layer-2 security zones V1-Trust, V1-DMZ,
and V1-Untrust are 0.0.0.0, thus making the NetScreen device invisible to the network.
However, the device can still perform firewall, VPN, and traffic management according to
configured security policies.
5RXWH0RGH
In Route mode, the NetScreen-50 device operates at Layer 3. Because you can configure
each interface using an IP address and subnet mask, you can configure individual
interfaces to perform NAT.
• When the interface performs NAT services, the device translates the source IP
address of each outgoing packet into the IP address of the untrusted port. It also
replaces the source port number with a randomly-generated value.
• When the interface does not perform NAT services, the source IP address and
port number in each packet header remain unchanged. Therefore, to reach the
Internet your local hosts must have routable IP addresses.
For more information on NAT, see the NetScreen Concepts and Examples ScreenOS
Reference Guide.
Important! Performing the setup instructions below configures your device in Route
mode. To configure your device in Transparent mode, see the NetScreen Concepts and
Examples ScreenOS Reference Guide.
To Next Page
Loading...
Need help?
General
