- Juniper Networks Netscreen NS-208 Firewall 頂級 防火牆

- Model No: NS-208，有 Rack Mount Kit

- 450Mbps Firewall Performance

- 200Mbps 3DES+SHA-1 Performance

- 180Mbps Deep Inspection Performace

- 128,000 Concurrent Sessions

- 11,500 New sessions/second

- 4,000 Policies

- 8 x FastEthernet Interfaces

- Layer2 Transparent Mode / Layer3 Route or NAT mode

- 100% work，極新淨，九龍新界免費送貨，港島 +$100

- 14天保養

NetScreen NS-200 Boot Loader Version 3.0.0 (Checksum: B48FB1B8)
Copyright (c) 1997-2003 NetScreen Technologies, Inc.

Total physical memory: 128MB
    Test - Pass
    Initialization - Done

Model Number: NS-208

Hit any key to run loader
Hit any key to run loader
Hit any key to run loader
Hit any key to run loader

Loading default system image from on-board flash disk...

Ignore image authentication!

 Start loading...
....................................................................................................
Done.

Juniper Networks, Inc
NS-200 System Software
Copyright, 1997-2006

Version 5.4.0r10.0
Init Heap (1ebb010/5344bf0, 00000000/00000000)
GT64120 revision id: 0x12
Load NVRAM Information ... (5.4.0)Done
GT64120 revision id: 0x12
Memory Test: b7800000,40000 ....... Done
Install module init vectors
Verify ACL register default value (at hw reset) ... Done
Verify ACL register read/write ... Done
Verify ACL rule read/write ... Done
Verify ACL rule search ... Done
MD5("a") = 0cc175b9 c0f1b6a8 31c399e2 69772661
MD5("abc") = 90015098 3cd24fb0 d6963f7d 28e17f72
MD5("message digest") = f96b697d 7cb7938d 525a2f31 aaf161d0
Verify DES register read/write ... Done
Install modules (00da3000,0197f380) ...

Initializing DI 1.1.0-ns
load dns table : dns table file does not exist.
*********************************************************
System time: 09Nov2009:04:50:31
If this is the initial device startup,
use the "set clock" command to set the system clock.
*********************************************************
system init done..
login: System change state to Active(1)

login: netscreen
password:
ns208-> get config
Total Config size 2456:
set clock timezone 0
set vrouter trust-vr sharable
set vrouter "untrust-vr"
exit
set vrouter "trust-vr"
unset auto-route-export
exit
set auth-server "Local" id 0
set auth-server "Local" server-name "Local"
set auth default auth server "Local"
set auth radius accounting port 1646
set admin name "netscreen"
set admin password "nKVUM2rwMUzPcrkG5sWIHdCtqkAibn"
set admin auth timeout 10
set admin auth server "Local"
set admin format dos
set zone "Trust" vrouter "trust-vr"
set zone "Untrust" vrouter "trust-vr"
set zone "DMZ" vrouter "trust-vr"
set zone "VLAN" vrouter "trust-vr"
set zone "Untrust-Tun" vrouter "trust-vr"
set zone "Trust" tcp-rst
set zone "Untrust" block
unset zone "Untrust" tcp-rst
set zone "MGT" block
set zone "DMZ" tcp-rst
set zone "VLAN" block
unset zone "VLAN" tcp-rst
set zone "Untrust" screen tear-drop
set zone "Untrust" screen syn-flood
set zone "Untrust" screen ping-death
set zone "Untrust" screen ip-filter-src
set zone "Untrust" screen land
set zone "V1-Untrust" screen tear-drop
set zone "V1-Untrust" screen syn-flood
set zone "V1-Untrust" screen ping-death
set zone "V1-Untrust" screen ip-filter-src
set zone "V1-Untrust" screen land
set interface "ethernet1" zone "Trust"
set interface "ethernet2" zone "DMZ"
set interface "ethernet3" zone "Untrust"
unset interface vlan1 ip
set interface ethernet1 ip
set interface ethernet1 nat
unset interface vlan1 bypass-others-ipsec
unset interface vlan1 bypass-non-ip
set interface ethernet1 ip manageable
unset flow no-tcp-seq-check
set flow tcp-syn-check
set ike respond-bad-spi 1
unset ike ikeid-enumeration
unset ike dos-protection
unset ipsec access-session enable
set ipsec access-session maximum 5000
set ipsec access-session upper-threshold 0
set ipsec access-session lower-threshold 0
set ipsec access-session dead-p2-sa-timeout 0
unset ipsec access-session log-error
unset ipsec access-session info-exch-connected
unset ipsec access-session use-error-log
set url protocol websense
exit
set pki authority default scep mode "auto"
set pki x509 default cert-path partial
set nsmgmt bulkcli reboot-timeout 60
set nsmgmt bulkcli reboot-wait 0
set ssh version v2
set config lock timeout 5
set snmp port listen 161
set snmp port trap 162
set vrouter "untrust-vr"
exit
set vrouter "trust-vr"
unset add-default-route
exit
set vrouter "untrust-vr"
exit
set vrouter "trust-vr"
exit