Juniper设备-防火墙运维要点程序.pptVIP

Copyright ? 2008 Juniper Networks, Inc. * Copyright ? 2008 Juniper Networks, Inc. * 　　　防火墙运维要点 设备管理访问控制 Management requests terminate on the unit As a security device, the NetScreen must qualify all management requests Match the management address of the arriving interface Match the IP address of a ‘trusted’ source Match an allowed service type Match username/password Src Dst Mgt. Request Addr Addr (ie. Ping) Management Service Filter I n t e r f a c e manage-ip Mgt. Address Allowed services A u t h e n t i c a t i o n Username/ password manager-ip Trusted S