Juniper firewall layer 2 transparent mode configuration

Firewall transparent Mode Settings (jnuiper ssg-140)

First of all, understanding what is the transparent mode of the firewall is equivalent to treating the firewall as a switch. The firewall will filter the IP packets that pass through, but will not modify any information in the header of the IP packet.

Advantages of transparent mode:

1. No need to change the existing network and configuration

2. No need to create mapping or virtual IP

3. Transparent mode consumes the least system resources.

The specific configuration is as follows:

1. Configure the private network interface in transparent mode

2. Configure the public network interface of the route pattern

3. Configure the IP of vlan1, that is, manage IP

4. View the configuration of all ports:

5. Configure Policies:

V1-trust to V1-untrust, this is an internal and external visit. Generally, all actions are released.

V1-untrust to V1-trust: this is the external-internal access right, which is generally operated according to the needs of customers (the server IP here is the real IP address of the back-end server).