Chapter 2 Configuring the Device
The ADSL interface has the predefined name "adsl1" and is the main connection from
your network to the Internet. To allow the NetScreen device (and the devices on your
network) to connect to the Internet, you must configure the adsl1 interface according to
information obtained from your service provider. Refer to
Interface" on page
The NetScreen device allows any type of traffic to the Internet that originates from
devices in your Trust zone, but it does not allow any traffic that originates in the Internet
to reach your network. You can configure additional restrictions; refer to
Additional Policies" on page
Configuring the ADSL Interface
Your network uses the ADSL interface "adsl1" on the NetScreen device to connect to the
service provider's network through an Asynchronous Transfer Mode (ATM) virtual circuit.
You can configure additional virtual circuits by creating ADSL subinterfaces (for more
information, see
In the WebUI, navigate to the Network > Interfaces page to see a list of the current
interfaces on the NetScreen device. If you are using a Telnet or Console session, enter the
CLI command get interface. You should see that the adsl1 interface is bound to the
Untrust zone. If you used the ICW to configure the device, there may be an IP address and
netmask already assigned to the adsl1 interface.
Note: If you do not want to use the ADSL interface, you can bind it to the Null zone with
the set interface adsl1 zone null command. If you use the ICW to configure the device,
you can choose an interface other than the ADSL interface as the default interface to the
Untrust zone.
You must configure the adsl1 interface to enable the NetScreen device to connect to the
service provider's network. To do this, you must obtain the following information from
your service provider:
•
Virtual Path Identifier and Virtual Channel Identifier (VPI/VCI) values
•
ATM Adaptation Layer 5 (AAL5) multiplexing method, which can be one of the
following:
–
–
•
User name and password assigned by the service provider for connection to the
service provider's network using either the Point-to-Point Protocol over Ethernet
(PPPoE) or Point-to-Point Protocol over ATM (PPPoA)
•
Authentication method, if any, provided for the PPPoE or PPPoA connection
•
Optionally, a static IP address and netmask value for your network
20
20.
25.
"Adding Virtual Circuits to an ADSL Interface" on page
Virtual Circuit (VC)-based multiplexing, in which each protocol is carried
over a separate ATM VC
Logical Link Control (LLC) encapsulation, which allows several protocols
to be carried on the same ATM VC (the default multiplexing method)
"Configuring the ADSL
"Configuring
21.
User's Guide