SSG140 security help

JuniperForum.com

March 10, 2010, 12:41:07 PM

Welcome, Guest. Please login or register.
Did you miss your activation email?

News: If you have an interesting idea for an article or knowledgebase entry, please submit it!

Home

Help

Latest Knowledgebase Articles

How to run the NSM GUI under Mac OS X
How to setup a route-based VPN on a NetScreen
How to make your PPTP VPN client work through a NetScreen/SSG
Setting up a dial-up VPN and NetScreen Remote
How the Global Zone Works (It's probably not what you think)
How to configure NetScreen/SSG devices to work with the built in Mac OS X VPN client
How to Configure Dial-up VPN with route-based tunnels, XAuth, and use IPSecuritas

JuniperForum.com > Networking Platforms > Configuration Examples and Tutorials > Topic: SSG140 security help

Pages: [1]

« previous next »

Author

Topic: SSG140 security help (Read 482 times)

BitJunkie

Newbie

Posts: 1

SSG140 security help

« on: February 07, 2010, 10:53:57 PM »

Hi all,
I'm a noob, so please be patient. We have some VMs for two customers behind an SSG140. I have been given a block of IP addresses, for example 1.1.1.1 through 1.1.1.5. Customer A is using the first two IPs and Customer B is using the rest. How can I isolate the two customer networks? It looks like I might be able to use subinterfaces, but I'm not sure how to go about doing that. Subinterfaces require an IP, so what range do they need to be in?

Any help is appreciated. Thanks.


	Logged

jonas-itp

Newbie

Posts: 6

Re: SSG140 security help

« Reply #1 on: February 16, 2010, 03:10:11 PM »

Hi..

The easy way:
Create a new subinterface and zone for customer B incl. new ip range.
Remember to create an separated vlans to the new subinterface in your switch connected to your firewall and servers. Then put the servers from customer A in the new vlan.
When you are using sub interfaces, traffic will come as tagged vlan frames

Remember to create policy to allow the traffic.

Best regards
Jonas Ø. Pedersen

Juniper networks specialist
(Juniper - Master of systems Engineering Award 2010)
EX, SSG, SRX, UAC, and SA

www.itplaneten.dk / www.jnpr.dk