CLI Configuration

1. Configure interfaces.

   user@host# set interfaces ge-0/0/0 unit 0 family inet address 10.1.1.1/24

   user@host# set interfaces ge-0/0/2 unit 0 family inet address 1.1.1.1/24

   user@host# set security zones security-zone private interface ge-0/0/0.0

2. Configure addresses.

   user@host# set security zones security-zone private address-book address phone1 10.1.1.3/32

   user@host# set security zones security-zone public address-book address proxy 10.1.1.3/32

   user@host# set security zones security-zone public address-book address phone2 1.1.1.4/32

3. Configure zones.

   user@host# set security zones security-zone private

   user@host# set security zones security-zone public

   user@host# set security zones security-zone private interfaces ge-0/0/0.0

   user@host# set security zones security-zone public interfaces ge-0/0/2.0

4. Configure source NAT.

   user@host# set security nat interface ge-0/0/2.0 source-nat allow-incoming

   user@host# set security nat source-nat address-persistent

5. Configure policies.

   user@host# set security policies from-zone private to-zone public policy outgoing match source-address phone1 destination-address any application junos-sip

   user@host# set security policies from-zone private to-zone public policy outgoing then permit source-nat interface

   user@host# set security policies from-zone public to-zone private policy incoming match source-address any destination-address incoming-nat-fe0/0/2.0 application junos-sip

   user@host# set security policies from-zone public to-zone private policy incoming then permit