CLI Configuration

1. Configure interfaces.

   user@host# set interfaces ge-0/0/0 unit 0 family inet address 10.1.1.1/24

   user@host# set interfaces ge-0/0/2 unit 0 family inet address 1.1.1.1/24

2. Configure zones.

   user@host# set security zones security-zone private

   user@host# set security zones security-zone public

   user@host# set security zones security-zone private interfaces ge-0/0/0.0

   user@host# set security zones security-zone public interfaces ge-0/0/2.0

3. Configure addresses.

   user@host# set security zones security-zone private address-book address phone1 10.1.1.3/32

   user@host# set security zones security-zone public address-book address phone2 1.1.1.4/32

   user@host# set security zones security-zone public address-book address proxy 1.1.1.3/32

4. Configure interface source-Nat.

   user@host# set security nat source-nat address-persistent

   user@host# set security nat interface ge-0/0/2.0 allow-incoming

5. Configure policies.

   user@host# set security policies from-zone private to-zone public policy outgoing match source-address phone1

   user@host# set security policies from-zone private to-zone public policy outgoing match destination-address any

   user@host# set security policies from-zone private to-zone public policy outgoing match application junos-sip

   user@host# set security policies from-zone private to-zone public policy outgoing then permit source-nat interface

   user@host# set security policies from-zone public to-zone private policy incoming match source-address any

   user@host# set security policies from-zone public to-zone private policy incoming match destination-address incoming_nat_ge-0/0/2.0

   user@host# set security policies from-zone public to-zone private policy incoming match application junos-sip

   user@host# set security policies from-zone public to-zone private policy incoming then permit