J-Web Configuration

1. To configure interfaces:
   1. Select Configuration > View and Edit > Edit Configuration. The Configuration page appears.
   2. Next to Interfaces, click Configure or Edit.
   3. Next to Interface, click Add new entry.
   4. In the Interface name box, type ge-0/0/0.
   5. Next to Unit, click Add new entry.
   6. Next to Interface unit number, type 0.
   7. Next to Inet, select the check box and click Configure.
   8. Next to Address, click Add new entry.
   9. Next to Source, type 10.1.1.1/24 and click OK.
   10. To configure another interface, ge-0/0/1 and ge-0/0/2, and addresses, 2.2.2.2/24 and 1.1.1.1/24, repeat Step b through Step i and click OK.
   11. To save and commit the configuration, click Commit.
2. To configure zones:
   1. Select Configuration > View and Edit > Edit Configuration. The Configuration page appears.
   2. Next to Security, click Configure or Edit.
   3. Next to Zones, click Configure.
   4. Next to Security zones, click Add new entry.
   5. In the Name box, type private and click OK.
   6. Next to Security zone, click Add new entry.
   7. In the Name box, type public and click OK.
   8. Next to Security zone, click Add new entry.
   9. In the Name box, type dmz and click OK.
   10. To configure an interface to the private zone, click private.
   11. Next to Interfaces, click Add new entry.
   12. Next to Interface unit box, type ge-0/0/0.0 and click OK.
   13. To configure an interface to the public zone, click public.
   14. Next to Interfaces, click Add new entry.
   15. Next to Interface unit box, type ge-0/0/2.0 and click OK.
   16. To configure an interface to the dmz, click dmz.
   17. Next to Interfaces, click Add new entry.
   18. Next to Interface unit box, type ge-0/0/1.0 and click OK.
   19. To save and commit the configuration, click Commit.
3. To configure addresses:
   1. Select Configuration > View and Edit > Edit Configuration. The Configuration page appears.
   2. Next to Security, click Configure or Edit.
   3. Next to Zones, click Configure.
   4. Next to Security zone, click Add new entry.
   5. In the Name box, type private.
   6. Next to Address book, click Configure.
   7. Next to Address, click Add new entry.
   8. In the Address name box, type phone1 10.1.1.3/32 and click OK.
   9. To configure more security zones, public and dmz, and address books entries such as phone2 1.1.1.4/32 and proxy 2.2.2.4/32, repeat Step d through Step h, and click OK.
   10. To save and commit the configuration, click Commit.
4. To configure static NAT:
   1. Select Configuration > View and Edit > Edit Configuration. The Configuration page appears.
   2. Next to Security, click Configure or Edit.
   3. Next to Nat, click Configure.
   4. Next to Interfaces, click Add new entry.
   5. In the Name box, type ge-0/0/1.0.
   6. Next to Static nat, click Add new entry.
   7. In the Address box, type 2.2.2.3/32.
   8. In the Host box, type 10.1.1.3/32 and click OK.
   9. To save and commit the configuration, click Commit.
5. To configure policies:
   1. Select Configuration > View and Edit > Edit Configuration. The Configuration page appears.
   2. Next to Security, click Configure or Edit.
   3. Next to Policies, select the check box and click Configure.
   4. Next to Policy, click Add new entry.
   5. In the From zone name box, type private.
   6. In the To zone name box, type dmz.
   7. Next to Policy, click Add new entry.
   8. In the Policy name box, type private-to-proxy.
   9. Select the Match check box.
   10. Select the Then check box.
   11. Next to Match check box, click Configure.
   12. From the Source address choice list, select Source address.
   13. Next to Source address, click Add new entry.
   14. From the Value keyword list, select Enter Specific Value.
   15. In the Address box, type phone1 and click OK.
   16. From the Destination address choice list, select Destination address.
   17. Next to Destination address, click Add new entry.
   18. Next to Value keyword list, select proxy and click OK.
   19. From the Application choice list, select Application.
   20. Next to Application, click Add new entry.
   21. In the Value keyword box, type junos-sip and click OK.
   22. Next to Then, click Configure.
   23. Next to Action, select permit.
   24. Click Configure next to Permit.
   25. Next to Source nat, select the check box and click Configure.
   26. From the Source nat choice list, select interface and click OK.

   To configure from zone, public, and to zone, dmz, and the respective source address, destination address, and application, follow the sequence of steps listed below:

   1. Select Configuration > View and Edit > Edit Configuration. The Configuration page appears.
   2. Next to Security, click Configure or Edit.
   3. Next to Policies, select the check box and click Configure.
   4. Next to Policy, click Add new entry
   5. In the From zone name box, type public.
   6. In the To zone name box, type private.
   7. Next to Policy, click Add new entry.
   8. In the Policy name box, type public-to-proxy.
   9. Select the Match check box.
   10. Select the Then check box.
   11. Click Configure next to Match check box.
   12. Next to Source address choice list select Source address.
   13. Next to Source address, click Add new entry.
   14. From the Value keyword list, type phone2 and click OK.
   15. From the Destination address choice list, select Destination address.
   16. Next to Destination address, click Add new entry.
   17. Next to Value keyword list, select Enter Specific Value.
   18. To specify the address, type proxy and click OK.
   19. From the Application choice list, select Application.
   20. Next to Application, click Add new entry.
   21. Next to Value keyword box, type junos-sip and click OK.
   22. Next to Then, click Configure.
   23. Next to Action, select permit and click OK.

   To configure from zone, private, and to zone, public, and the respective source address, destination address, and application, follow the sequence of steps listed below:

   1. Select Configuration > View and Edit > Edit Configuration. The Configuration page appears.
   2. Next to Security, click Configure or Edit.
   3. Next to Policies, select the check box and click Configure.
   4. Next to Policy, click Add new entry.
   5. In the From zone name box, type private.
   6. In the To zone name box, type public.
   7. Next to Policy, click Add new entry.
   8. In the Policy name box, type private-to-public.
   9. Select the Match check box.
   10. Select the Then check box.
   11. Next to Match check box, click Configure.
   12. From the Source address choice list, select Source address.
   13. Next to Source address, click Add new entry.
   14. From the Value keyword list, select Enter Specific Value.
   15. In the Address box, type phone1 and click OK.
   16. From the Destination address choice list, select Destination address.
   17. Next to Destination address, click Add new entry.
   18. Next to Value keyword list, type phone2 and click OK.
   19. From the Application choice list, select Application.
   20. Next to Application, click Add new entry.
   21. In the Value keyword box, type junos-sip and click OK.
   22. Next to Then, click Configure.
   23. Next to Action, select permit.
   24. Click Configure next to Permit.
   25. Next to Source nat, select the check box and click Configure.
   26. From the Source nat choice list, select interface and click OK.

   To configure from zone, dmz, and to zone, private, and the respective source address, destination address, and application, follow the sequence of steps listed below:

   1. Select Configuration > View and Edit > Edit Configuration. The Configuration page appears.
   2. Next to Security, click Configure or Edit.
   3. Next to Policies, select the check box and click Configure.
   4. Next to Policy, click Add new entry
   5. In the From zone name box, type dmz.
   6. In the To zone name box, type private.
   7. Next to Policy, click Add new entry.
   8. In the Policy name box, type proxy-to-private.
   9. Select the Match check box.
   10. Select the Then check box.
   11. Click Configure next to Match check box.
   12. Next to Source address choice list select Source address.
   13. Next to Source address, click Add new entry.
   14. From the Value keyword list, type proxy and click OK.
   15. From the Destination address choice list, select Destination address.
   16. Next to Destination address, click Add new entry.
   17. Next to Value keyword list, select Enter Specific Value.
   18. To specify the address, type static_nat_2.2.2.3_32 and click OK.
   19. From the Application choice list, select Application.
   20. Next to Application, click Add new entry.
   21. Next to Value keyword box, type junos-sip and click OK.
   22. Next to Then, click Configure.
   23. Next to Action, select permit and click OK.

   To configure from zone, dmz, and to zone, public, and the respective source address, destination address, and application, follow the sequence of steps listed below:

   1. Select Configuration > View and Edit > Edit Configuration. The Configuration page appears.
   2. Next to Security, click Configure or Edit.
   3. Next to Policies, select the check box and click Configure.
   4. Next to Policy, click Add new entry
   5. In the From zone name box, type dmz.
   6. In the To zone name box, type public.
   7. Next to Policy, click Add new entry.
   8. In the Policy name box, type proxy-to-public.
   9. Select the Match check box.
   10. Select the Then check box.
   11. Click Configure next to Match check box.
   12. Next to Source address choice list select Source address.
   13. Next to Source address, click Add new entry.
   14. From the Value keyword list, type proxy and click OK.
   15. From the Destination address choice list, select Destination address.
   16. Next to Destination address, click Add new entry.
   17. Next to Value keyword list, select Enter Specific Value.
   18. To specify the address, type phone2 and click OK.
   19. From the Application choice list, select Application.
   20. Next to Application, click Add new entry.
   21. Next to Value keyword box, type junos-sip and click OK.
   22. Next to Then, click Configure.
   23. Next to Action, select permit and click OK.
   24. To save and commit the configuration, click Commit.
   25. To check the configuration, see “Verifying the SIP Configuration” on page 522.