This page presents a list of the all interfaces on your Juniper Networks security device. These include physical, VLAN1, tunnel, redundant, virtual security (VSI) interfaces—and for devices that support them—WAN, multilink, aggregate, and sub-interfaces. Because there is a physical interface for each port on your device, physical interfaces are always listed regardless of whether or not you configure them. By default, ScreenOS creates the VLAN1 interface. Other types of interfaces are only listed once you create and configure them.
The interface list provides the following information on each interface:
Name: Identifies the name of the interface.
IP/Netmask: Identifies the IP address and netmask address of the interface.
Zone: Identifies the zone to which the interface is bound.
Type: Indicates at which layer—layer 2 (data-link) or layer 3 (network)—the interface is operating.
Link: Identifies whether the interface is active, inactive, up or down.
Configure: Click Edit to configure an interface for the first time or to modify an existing configuration. Clicking Edit opens the "Basic" interface properties page where, for some interfaces, you can also configure mapped IPs (MIP), dynamic IPs (DIP), secondary IPs (2IP), virtual IPs (VIP, and DHCP). For more information, see Interface Configuration. Click Remove to remove a non-physical interface.
A List Interfaces drop-down menu gives you the option to view all interfaces at once or one type of interface at a time (for example, layer 2 interfaces only or tunnel interfaces only, etc.). You can also select the number of interfaces you want to view per page by selecting a number in the List per Page drop-down menu.
Note: Sort the information in the list by Name, IP/Netmask, or Zone by clicking the appropriate column title.
You must create an interface and bind it to a zone to allow traffic to flow in and out of the zone. An interface acts as a doorway to a zone, permitting traffic to enter and exit the zone. For more information on configuring an interface, see Interface Configuration.
Once you configure an interface, you also have to set routes and configure access policies to allow traffic to pass from interface to interface.