Navigation
Supported Platforms
Configuring HTTP Redirect Services
You can configure a walled garden with services and policies.
To configure the HTTP redirect service:
- Configure the packet and installation.[edit chassis]fpc 1 {pic 0 {adaptive-services {service-package {extension-provider {control-cores 1;data-cores 7;object-cache-size 1024;policy-db-size 64;package jservices-cpcd;syslog {daemon any;external any;}}}}}}
- Configure the units and assign the VLAN IDs. [edit interfaces]ge-0/0/1 {vlan-tagging;unit 1 {vlan-id 100;family inet {address 100.20.1.1/24;}}}
- Configure the policy options.policy-options {prefix-list google {74.125.19.0/24;}}
- Configure the service options.firewall {family inet {service-filter walled {term google {from {destination-prefix-list {google;}}then skip;}term http {from {destination-port [ 80 8080 443 ];}then service;}term skip {then skip;}}service-filter fromSRC {term SRC {from {source-address {10.1.2.3/32;}source-port 8800;}then service;}term skip {then skip;}}service-filter test {term t1 {from {protocol icmp;}then service;}}}}
- Configure the captive portal content delivery services.services {captive-portal-content-delivery {rule test {match-direction input;term t1 {then {rewrite;}}}profile ipda-rewrite {cpcd-rules test;ipda-rewrite-options {destination-address 10.1.2.3;destination-port 8800;}}traceoptions {file cpcdd;flag all;}}service-set sset1 {captive-portal-content-delivery-profile ipda-rewrite;interface-service {service-interface ms-1/0/0;}}stateful-firewall {rule Rule1 {match-direction input-output;term 1 {from {applications [ junos-icmp-all junos-dhcp-server junos-tftp junos-http ];}then {accept;}}term 2 {from {applications SRC;}then {accept;}}}}}
- Configure the applications.applications {application SRC {protocol tcp;destination-port 8800;}}
