[
Contents]
[
Prev]
[
Next]
[
Index]
[
Report an Error]
CLI Configuration
- Configure interfaces.
- user@host# set interfaces ge-0/0/0 unit 0
family inet address 10.1.1.1/24
-
user@host# set interfaces ge-0/0/1
unit 0 family inet address 1.1.1.1/24
- Configure zone.
-
user@host# set security zones security-zone
private interface ge-0/0/0.0
-
user@host# set security zones security-zone
private address-book address phone1 10.1.1.3/32
-
user@host# set security zones security-zone
private address-book address cm-tftp_server
10.1.1.4/32
-
user@host# set security zones security-zone
public interface ge-0/0/1.0
-
user@host# set security zones security-zone
public address-book address phone2 1.1.1.4/32
- Configure static NAT.
-
user@host# set security nat interface
ge-0/0/1.0 static 1.1.1.2 host 10.1.1.4
- Configure policies.
-
user@host# set security policies
from-zone private to-zone public policy out-pol match source-address any
-
user@host# set security policies
from-zone private to-zone public policy out-pol match destination-address phone2
-
user@host# set security policies
from-zone private to-zone public policy out-pol match application junos-sccp
-
user@host# set security policies
from-zone private to-zone public policy out-pol then permit source-nat interface
-
user@host# set security policies
from-zone public to-zone junos-global policy in-pol match source-address phone2
-
user@host# set security policies
from-zone public to-zone junos-global policy in-pol match destination-address static_nat_1.1.1.2_32
-
user@host# set security policies
from-zone public to-zone junos-global policy in-pol match application junos-sccp
-
user@host# set security policies
from-zone public to-zone junos-global policy in-pol then permit
[
Contents]
[
Prev]
[
Next]
[
Index]
[
Report an Error]