NetScreen Technologies 10 Assembly instructions

1(76&5((1
,QVWDOOHU·V*XLGH
9HUVLRQ 31 5HY'

LL 1HW6FUHHQ

Copyright Notice
Copyright © 2000-2001 NetScreen Technologies, Inc.
All rights reserved. Printed in USA.
NetScreen, the NetScreen logo, NetScreen-5, NetScreen-10,
NetScreen-100 and NetScreen-1000 are registered
trademarks or trademarks of NetScreen Technologies, Inc.
Netscape Communicator is a registered trademark of
Netscape in the United States and/or other countries.
Microsoft, Windows and Windows NT are registered
trademarks of Microsoft Corporation in the U.S.A. and/or
other countries. Hyperterminal is a registered trademarks of
Hilgaeve Corporation. All other brands and their products
mentioned in this document are trademarks or registered
trademarks of their respective owners.
The specifications regarding the products in this manual are
subject to change without notice. All statements,
information, and recommendations in this manual are
believed to be accurate but are presented without warranty
of any kind, express or implied. Users must take full
responsibility for their application of any products. This
document may only be used or copied in accordance with the
terms of such license.
NetScreen Technologies, Inc.
350 Oakmead Parkway, Suite 500
Sunnyvale, CA 94085 U.S.A.
www.netscreen.com
FCC Statement
This equipment has been tested and found to comply with
the limits for a Class A digital device, pursuant to part 15 of
the FCC rules. These limits are designed to provide
reasonable protection against harmful interference in a light
commercial installation. This equipment generates, uses and
can radiate radio frequency energy, and, if not installed and
used in accordance with the instruction, may cause harmful
interference to radio communications. However, there is no
guarantee that interference will not occur in a particular
installation. If this equipment does cause harmful
interference to radio or television reception, which can be
determined by turning the equipment off and on, the user is
encouraged to try to correct the interference by one or more
of the following measures:
•Reorient or relocate the receiving antenna.
•Increase the separation between the equipment and
receiver.
•Consult the dealer or an experienced radio/TV techni-
cian for help.
•Connect the equipment to an outlet on a circuit differ-
ent from that to which the receiver is connected.
Caution: Changes or modifications to this product could
void the user's warranty and authority to operate this device.
Product License Agreement
PLEASE READ THIS LICENSE AGREEMENT
(“AGREEMENTS”) CAREFULLY BEFORE USING THIS
PRODUCT. BY INSTALLING AND OPERATING, YOU
INDICATE YOUR ACCEPTANCE OF THE TERMS OF
THIS LEGAL AND BINDING AGREEMENT AND ARE
CONSENTING TO BE BOUND BY AND ARE BECOMING
A PART TO THIS AGREEMENT. IF YOU DO NOT AGREE
TO ALL OF THE TERMS OF THIS AGREEMENT, DO NOT
START THE INSTALLATION PROCESS.
1. License Grant. This is a license, not a sales agreement,
between you, the end user, and NetScreen Technologies, Inc.
(“NetScreen”). The term “Firmware” includes all NetScreen
and third party Firmware and software provided to you with
the NetScreen product, and includes any accompanying
documentation, any updates and enhancements of the
Firmware and software provided to you by NetScreen, at its
option. NetScreen grants to you a non-transferable (except as
provided in section 3 (“Transfer”) below, non-exclusive
license to use the Firmware and software in accordance with
the terms set forth in this License Agreement. The Firmware
and software are “in use” on the product when they are
loaded into temporary memory (i.e. RAM).
2. Limitation on Use. You may not attempt and if you are a
corporation, you will use best efforts to prevent your
employees and contractors from attempting to, (a) modify,
translate, reverse engineer decompile, disassemble, create,
derivative works based on, sublicense, or distribute the
Firmware or the accompanying documentation; (b) rent or
lease any rights in the Firmware or software or
accompanying documentation in any form to any person; or
(c) remove any proprietary notice, labels, or marks on the
Firmware, software, documentation, and containers.
3. Transfer. You may transfer (not rent or lease) the
Firmware or software to the end user on a permanent basis,
provided that: (i) the end user receives a copy of this
Agreement and agrees in writing to be bound by its terms
and conditions, and (ii) you at all times comply with all
applicable United States export control laws and regulations.
4. Proprietary Rights. All rights, title, interest, and all
copyrights to the Firmware, software, documentation, and
any copy made by you remain with NetScreen. You
acknowledge that no title to the intellectual property in the
Firmware and software is transferred to you and you will not
acquire any rights to the Firmware except for the license as
expressly set forth herein.
5. Term and Termination. The term of the license is for the
duration of NetScreen's copyright in the Firmware and
software. NetScreen may terminate this Agreement
immediately without notice if you breach or fail to comply
with any of the terms and conditions of this Agreement. You
agree that, upon such termination, you will either destroy all
copies of the documentation or return all materials to
NetScreen. The provisions of this Agreement, other than the
license granted in Section 1 (“License Grant”) shall survive
termination.

3URGXFW/LFHQVH$JUHH HQW
,QVWDOOHU·V*XLGH LLL

6. Limited Warranty. For a period of one (1) year after
delivery to Customer, NetScreen will repair or replace any
defective product shipped to Customer, provided it is
returned to Netscreen at Customer’s expense within that
period. For a period of ninety (90) days after the initial
delivery of a particular product, NetScreen warrants to
Customer that such product will substantially conform with
NetScreen’s published specifications for that product if
properly used in accordance with the procedures described in
documentation supplied by NetScreen. NetScreen’s exclusive
obligation with respect to non-conforming product shall be,
at NetScreen’s option, to replace the product or use diligent
efforts to provide Customer with a correction of the defect, or
to refund to customer the purchase price paid for the unit.
Defects in the product will be reported to NetScreen in a
form and with supporting information reasonably requested
by NetScreen to enable it to verify, diagnose, and correct the
defect. For returned product, the customer shall notify
NetScreen of any nonconforming product during the
warranty period, obtain a return authorization for the
nonconforming product, from NetScreen, and return the
nonconforming product to NetScreen’s factory of origin with
a statement describing the nonconformance.
NOTWITHSTANDING ANYTHING HEREIN TO THE
CONTRARY, THE FOREGOING IS CUSTOMER’S SOLE
AND EXCLUSIVE REMEDY FOR BREACH OF
WARRANTY BY NETSCREEN WITH RESPECT TO THE
PRODUCT.
The warranties set forth above shall not apply to any
Product or Hardware which has been modified, repaired or
altered, except by NetScreen, or which has not been
maintained in accordance with any handling or operating
instructions supplied by NetScreen, or which has been
subjected to unusual physical or electrical stress, misuse,
abuse, negligence or accidents.
THE FOREGOING WARRANTIES ARE THE SOLE AND
EXCLUSIVE WARRANTIES EXPRESS OR IMPLIED
GIVEN BY NETSCREEN IN CONNECTION WITH THE
PRODUCT AND HARDWARE, AND NETSCREEN
DISCLAIMS ALL IMPLIED WARRANTIES, INCLUDING
IMPLIED WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT OF THIRD PARTY RIGHTS.
NETSCREEN DOES NOT PROMISE THAT THE
PRODUCT IS ERROR-FREE OR WILL OPERATE
WITHOUT INTERRUPTION.
7. Limitation of Liability. IN NO EVENT SHALL
NETSCREEN OR ITS LICENSORS BE LIABLE UNDER
ANY THEORY FOR ANY INDIRECT, INCIDENTAL,
COLLATERAL, EXEMPLARY, CONSEQUENTIAL OR
SPECIAL DAMAGES OR LOSSES SUFFERED BY YOU OR
ANY THIRD PARTY, INCLUDING WITHOUT
LIMITATION LOSS OF USE, PROFITS, GOODWILL,
SAVINGS, LOSS OF DATA, DATA FILES OR PROGRAMS
THAT MAY HAVE BEEN STORED BY ANY USER OF THE
FIRMWARE. IN NO EVENT WILL NETSCREEN'S OR ITS
LICENSORS' AGGREGATE LIABILITY CLAIM BY YOU,
OR ANYONE CLAIMING THROUGH OR ON BEHALF OF
YOU, EXCEED THE ACTUAL AMOUNT PAID BY YOU TO
NETSCREEN FOR FIRMWARE.
Some jurisdictions do not allow the exclusions and
limitations of incidental, consequential or special damages,
so the above exclusions and limitations may not apply to you.
8. Export Law Assurance. You understand that the
Firmware is subject to export control laws and regulations.
YOU MAY NOT DOWNLOAD OR OTHERWISE EXPORT
OR RE-EXPORT THE FIRMWARE OR ANY UNDERLYING
INFORMATION OR TECHNOLOGY EXCEPT IN FULL
COMPLIANCE WITH ALL UNITED STATES AND OTHER
APPLICABLE LAWS AND REGULATIONS.
9. U.S. Government Restricted Rights. If this Product is
being acquired by the U.S. Government, the Product and
related documentation is commercial computer Product and
documentation developed exclusively at private expense, and
(a) if acquired by or on behalf of civilian agency, shall be
subject to the terms of this computer Firmware, and (b) if
acquired by or on behalf of units of the Department of
Defense (“DoD”) shall be subject to terms of this commercial
computer Firmware license Supplement and its successors.
10. Tax Liability. You agree to be responsible for the
payment of any sales or use taxes imposed at any time
whatsoever on this transaction.
11. General. If any provisions of this Agreement are held
invalid, the remainder shall continue in full force and effect.
The laws of the State of California, excluding the application
of its conflicts of law rules shall govern this License
Agreement. This Agreement will not be governed by the
United Nations Convention on the Contracts for the
International Sale of Goods. This Agreement is the entire
agreement between the parties as to the subject matter
hereof and supersedes any other Technologies,
advertisements, or understandings with respect to the
Firmware and documentation. This Agreement may not be
modified or altered, except by written amendment, which
expressly refers to this Agreement and which, is duly
executed by both parties.
You acknowledge that you have read this Agreement,
understand it, and agree to be bound by its terms and
conditions.
Hardware, including technical data, is subject to U.S. export
laws, including the U.S. Export Administration Act and its
associated regulations, and may be subject to export or
import regulations in other countries. Customer agrees to
comply strictly with all such regulations and acknowledges
that it has the responsibility to obtain licensed to export, re-
export, or import hardware.

,QVWDOOHU·V*XLGH Y

7DEOHRI&RQWHQWV
0DQXDO2UJDQL]DWLRQ YLL
5HODWHG3XEOLFDWLRQV  [
&KDSWHU+DUGZDUH HVFULSWLRQ  
&KDSWHU&RQQHFWLQJWKH1HW6FUHHQWRWKH1HWZRUN  
*DWKHULQJWKH1HFHVVDU\7RROV  
&RQQHFWLQJWKH1HW6FUHHQDVD6LQJOH6HFXULW\$SSOLDQFH  
&RQQHFWLQJWKH1HW6FUHHQIRU+LJK$YDLODELOLW\ 
&KDSWHU,QLWLDO&RQILJXUDWLRQ 
&RQILJXULQJYLDWKH:HE8, 
0DNLQJD&RQQHFWLRQ  
/RJJLQJ2QDQG6HWWLQJWKH6\VWHP,3$GGUHVV  
6HWWLQJ,QWHUIDFH$GGUHVVHV  
$OORZLQJ2XWERXQG7UDIILF  
&KDQJLQJWKH$GPLQLVWUDWRU/RJLQ1DPHDQG3DVVZRUG  
7HVWLQJWKH&RQILJXUDWLRQ 
&RQILJXULQJ+LJK$YDLODELOLW\YLDWKH:HE8,  
,PSOHPHQWLQJDQ+$&RQILJXUDWLRQ  
&RQILJXULQJWKH0DVWHU8QLW  
&RQILJXULQJWKH6ODYH8QLW 
&RQILJXULQJYLDWKH&/,  
0DNLQJD&RQQHFWLRQ  
/RJJLQJ2QDQG6HWWLQJWKH6\VWHP,3$GGUHVV  
6HWWLQJ,QWHUIDFH$GGUHVVHV  
$OORZLQJ2XWERXQG7UDIILF  
&KDQJLQJWKH$GPLQLVWUDWRU/RJLQ1DPHDQG3DVVZRUG  
7HVWLQJWKH&RQILJXUDWLRQ 
&RQILJXULQJ+LJK$YDLODELOLW\YLDWKH&/, 
$SSHQGL[$6DIHW\5HFRPPHQGDWLRQVDQG:DUQLQJV $
6DIHW\:DUQLQJV  $
,QVWDOODWLRQ:DUQLQJ  $
3RZHU LVFRQQHFWLRQ:DUQLQJ $
1R8VHU6HUYLFHDEOH3DUWV:DUQLQJ $
&LUFXLW%UHDNHU$:DUQLQJ $
6(/9&LUFXLW:DUQLQJ  $
/LJKWQLQJ$FWLYLW\:DUQLQJ  $
/LWKLXP%DWWHU\:DUQLQJ  $
3URGXFW LVSRVDO:DUQLQJ $

YL 1HW6FUHHQ

*HQHUDO6LWH5HTXLUHPHQWV  $
2QVLWH3UHFDXWLRQV $
(TXLSPHQW5DFN0RXQWLQJ*XLGHOLQHV  $
%60,/DEHOLQJ5HTXLUHPHQW $
$SSHQGL[% &3RZHU6XSSO\  %
&RQQHFWLQJWR &3RZHU6XSSO\&DEOHV%
,QGH[ ,;

,QVWDOOHU·V*XLGH YLL

3UHIDFH
The NetScreen-10™and NetScreen-100™are network security devices that protect
your Ethernet local area network (LAN) when connecting to the Internet. Using a
NetScreen-10/100 as a firewall, you can configure access policies that control
inbound and outbound network and VPN traffic.
0$18$/25*$1,=$7,21
This manual has three chapters and two appendices.
Chapter 1, Hardware Description, describes the NetScreen®device. It explains the
functions of the status LEDs, identifies the device interface ports, and details the
front and back panels of the device.
Chapter 2, Connecting the NetScreen-10/100 to the Network, explains how to
connect the NetScreen-10/100 to the network as a standalone unit or, with two or
more NetScreen-100 devices, for High Availability (HA).
Chapter 3, Initial Configuration, explains how to configure the NetScreen-10/100
with a network using both the command line interface (CLI) and the web user
interface (WebUI).
Appendix A, Safety Recommendations and Warnings, provides general site
requirements as well as safety warnings and general cautions when using the
NetScreen-10/100 device.
Appendix B, DC Power Supply, provides technical specifications and electrical
requirements for the DC power supply unit of the NetScreen-10/100.
Note: In this guide, the NetScreen-10 and NetScreen-100 are referred to
collectively as the NetScreen-10/100. They are, however, two separate devices.

3UHIDFH
YLLL 1HW6FUHHQ

*(1(5$//$<2872)7+(1(76&5((1:(%8,
The Web User Interface (WebUI) contains two main logical sections: the menu
column and the central display area.
•The menu column includes four main functional categories: System,
Network, Lists, and Monitor, each of which contains further sub-functions
represented by tabs in the central display area. During the configuration
process, you first must select a main functional category before choosing the
various utilities offered within each sub-category.
•The central display area displays the information for each of the categories
in the menu column, in either a tabular or graphical format. These pages
generally contain links to dialog boxes through links such as New Policy,
New Manual Key User, New Entry, Edit, and so forth.
The NetScreen-10/100 Central Display Area
Menu
column
Tab
categories
Links

,QVWDOOHU·V*XLGH L[
&200$1 /,1(,17(5)$&(&/,6<17$;
These guidelines apply to all NetScreen commands.
6\QWD[
•A parameter inside [ ] (square brackets) is optional.
•A parameter inside { } (braces) is required.
•Anything inside < > is a variable.
•If there is more than one choice for a parameter inside [ ] and { }, they are
separated by a pipe ( | ). For example, [auth {md5 | sha-1}] means
“choose either MD5 or SHA-1 as your authentication method.”
•IP addresses are represented by <a.b.c.d>, and <a.b.c.d>–<w.x.y.z> if a range
is being specified.
•A subnet mask is represented by <A.B.C.D>.
&RQYHQWLRQV
•To remove a single character, press BACKSPACE or CTRL+H.
•To remove an entire line, press CTRL+U.
•To traverse up to 16 lines forward in the command history buffer, press CTRL+F or the
DOWN ARROW key.
•To traverse up to 16 lines backward in the command history buffer, press
CTRL+B or the UP ARROW key.
•To see the next available keyword or input, and a brief description of usage,
type a question mark (?).
•The console times out and the connection is broken if no keyboard activity is
detected for 10 minutes.
Items you enter are into the system are in bold text.
Note: To use the arrow keys for navigating among commands in a Telnet
session on Windows 95, 98, NT, or 2000: On the Terminal menu, click
Preferences…, select the VT100 Arrows check box, and click the OK button.

3UHIDFH
[1HW6FUHHQ

For further explanation of NetScreen commands and their syntax, refer to the
NetScreen CLI Reference Guide, which is included on the product CD.
5(/$7( 38%/,&$7,216
This technical publication is shipped with the NetScreen-100 device.
NetScreen-100 Getting Started Guide
(P/N 093-0019-000, Rev. C)
This technical publication is shipped with the NetScreen-10 device:
NetScreen-10 Getting Started Guide
(P/N 093-0018-000, Rev. C)
The following publications are included on the product CD for both devices:
NetScreen CLI Reference Guide
(P/N 093-0011-000, Rev. E)
NetScreenWebUIReferenceGuide
(P/N 093-0040-000, Rev. C)
NetScreen Concepts & Examples ScreenOS Reference Guide
(P/N 093-0039-000, Rev. D)
Note: To receive important news on product updates, please visit our web site at
www.netscreen.com and register your product.

,QVWDOOHU·V*XLGH 

&KDSW HU
+DUGZDUH HVFULSWLRQ
This chapter provides illustrations and descriptions of the
NetScreen-10 and NetScreen-100 front and back panels.
A front view of the NetScreen-10 or NetScreen-100 is shown below. The label on
the left side indicates the model name: NetScreen-10 or NetScreen-100.
Figure 1-1 Front Panel of the NetScreen-10 or -100
These items are located on the front panel of the NetScreen-10/100:
•PowerLED: glows solid green when power is supplied to the
NetScreen-10/100.
•StatusLED: glows solid green when the NetScreen-10/100 is first powered
up and the unit first performs diagnostics. Then the unit goes into a startup
phase, which takes up to one minute to complete. During startup, the LED
blinks orange, after which the LED blinks green. If an error is detected, then
the LED glows red. The LED changes to yellow whenever the unit writes to
the internal flash card.
• PCMCIA Flash Card Slot: The NetScreen-10/100 supports a PCMCIA
ATA-compatible flash card. Supported cards include the SanDisk 96-MB and
20-MB CompactFlash. The NetScreen device automatically detects the
presence of a flash card and records the event log to it.

&KDSWHU+DUGZDUH'HVFULSWLRQ
 1HW6FUHHQ
•ConsolePort: DB25 serial port connector for local configuration and
administration.
• Trusted, DMZ, and Untrusted Ethernet LEDs: Each Ethernet port has
two link lights, or LEDs. The left LED indicates network traffic activity and
the right LED indicates if the link is up (connected to an active device).
These LEDs differ for the NetScreen-10 and NetScreen-100. See Figure 1-2.
Figure 1-2 Ethernet LEDs
Note: For cabling guidelines and instructions, see “Connecting the
NetScreen-10/100 as a Single Security Appliance” on page 2-1.

,QVWDOOHU·V*XLGH 

The back panel of the NetScreen-10/100 is shown in Figure 1-3.
Figure 1-3 Back Panel of the NetScreen-10/100
•ProductLabel: The model number is either NS-10x or NS-100x, where x=a,
e, or f.
• Power Outlet: Use the outlet to connect power to the NetScreen-10/100
with the supplied power cable.
•On/OffSwitch: Turns the power to the NetScreen-10/100 on or off.
Table 1-1 NetScreen-10/100 Model Numbers
Model Type Functionality
aFirewall & VPN (3DES & DES)
eFirewall & VPN (DES)
fFirewall
Note: Certain export restrictions apply to international customers. Check
with your sales representative.
Note: Figure 1-3 does not show a NetScreen-10/100 equipped with a DC
power supply. See “Appendix B: DC Power Supply” for more information.
Caution
Make sure you have read the Appendix, “Safety Recommendations and
Warnings”, before you begin installation.

,QVWDOOHU·V*XLGH 

&KDSW HU
&RQQHFWLQJWKH
1HW6FUHHQWRWKH
1HWZRUN
Follow the instructions in this chapter to connect the NetScreen-10/100 device to
the network and to configure the software for the first time. For further
configuration options, see the NetScreen Concepts & Examples ScreenOS
Reference Guide on the product CD.
This chapter contains the following sections:
•“Gathering the Necessary Tools” on page 2-1
•“Connecting the NetScreen-10/100 as a Single Security Appliance” on page
2-2
•“Connecting the NetScreen-100 for High Availability” on page 2-5
*$7+(5,1*7+(1(&(66$5<722/6
The chassis can be placed on a table top or mounted in a standard 19-inch
equipment rack. Table top installation requires no tools. Rack mounting requires
a Phillips-head screwdriver, the rack mount bracket kit, and four screws to match
the rack. Screws for attaching the mounting brackets to the chassis are provided
in the NetScreen-10/100 product package.
Caution
Make sure you have read Appendix A, “Safety Recommendations and Warnings” ,
before you begin this chapter.
Note: The rack mount screws included in the product package may not fit your
rack. In this case, it is necessary that you supply screws to match the particular
rack thread size.

&KDSWHU&RQQHFWLQJWKH1HW6FUHHQWRWKH1HWZRUN
 1HW6FUHHQ
&211(&7,1*7+(1(76&5((1$6$6,1*/(6(&85,7<$33/,$1&(
Note that if you are configuring multiple NetScreen-10/100 devices, you should
install and configure them one at a time. Otherwise, because they all share the
same default IP address (192.168.1.1), you might encounter IP address conflicts.
To set up the NetScreen-10/100 network connections, follow these steps:
1. Install the NetScreen-10/100 in a rack (optional) or on a level surface.
2. Make sure that the power connection to the NetScreen-10/100 is turned off;
that is, that “0” is pressed.
3. Connect the power cable provided in the product package from the
NetScreen-10/100 power outlet to the power supply.
4. Connect the NetScreen-10/100 to the network as shown in one of the
examples beginning on page 2-31.
Trusted Port: Connect the NetScreen-10/100 using a twisted pair cable
with RJ45 connectors. The trusted port is a Data Circuit-terminating
Equipment (DCE) port.
DMZ Port: Connect the NetScreen-10/100 using a twisted pair cable with
RJ45 connectors. The DMZ port is also a DCE port.
Untrusted Port: Connect the NetScreen-10/100 using a twisted pair cable
with RJ45 connectors. The untrusted port is a data terminal equipment
(DTE) port.
5. Turn on the NetScreen-10/100 and any other network devices that you had
turned off.
6. If all cables are connected correctly, the link light for each connection glows.
1. Check your router, hub, or computer documentation to determine if you must reconfigure the de-
vice or if you must switch off the power supply when connecting new equipment to the LAN.

&RQQHFWLQJWKH1HW6FUHHQDVD6LQJOH6HFXULW\$SSOLDQFH
,QVWDOOHU·V*XLGH 

Figure 2-1 Sample Configuration with a Router Connected to the Untrusted Port, Local
Area Network (LAN) Connected to the Trusted Port


7UXVWHGSRUW
0=SRUW
8QWUXVWHG
SRUW
FURVVRYHU
FDEOH

&KDSWHU&RQQHFWLQJWKH1HW6FUHHQWRWKH1HWZRUN
 1HW6FUHHQ
To use the DMZ, connect a crossover cable from the DMZ port on the
NetScreen-10/100 to the switch linking the machines in the DMZ to the DMZ
interface. See Figure 2-2 for an example of this configuration.
Figure 2-2 Sample Configuration Using DMZ Port

&RQQHFWLQJWKH1HW6FUHHQIRU+LJK$YDLODELOLW\
,QVWDOOHU·V*XLGH 

&211(&7,1*7+(1(76&5((1)25+,*+$9$,/$%,/,7<
High Availability (HA) is an option for NetScreen-100 devices that provides
protection against device failures in networks with two or more devices. If one
unit fails, the second unit can assume its functions with no service or traffic
interruption. See “High Availability” in NetScreen Concepts and Examples Screen
OS Reference Guide for more information.
Figure 2-3 Sample HA Configuration (NetScreen-100)
Note: You may have to supply additional cables, depending on your particular
configuration. A Data Terminal Equipment (DTE) device requires a crossover
cable to connect to a DTE port. A DCE (Data Communications Equipment) device
requires a crossover cable to connect to a DCE port.

&KDSWHU&RQQHFWLQJWKH1HW6FUHHQWRWKH1HWZRUN
 1HW6FUHHQ
Table 2-1 Typical NetScreen-10/100 Cable Connections.
If all cables are connected correctly, the link light for each connection glows.
For a device connected to: Untrusted Port (DTE)*Trusted Port (DCE)
Workstation (DTE) crossover straight-through
Switch/Hub (DCE) straight-through crossover
Router§(DTE) crossover straight-through
*An Untrusted Ethernet port is not technically a DTE, but for cabling purposes should be
treated as such.
§Routers with uplink ports may behave in reverse.