CLI Configuration

To create an application set and associate it with an IDP policy:

1. Create an application set and specify applications to be included in the set. The following statements create the SrvAccessAppSet application set that includes a set of three applications:

   user@host# set applications application-set SrvAccessAppSet application ssh

   user@host# set applications application-set SrvAccessAppSet application telnet

   user@host# set applications application-set SrvAccessAppSet application custApp

2. Associate the application set with an IDP policy. The following statement associates the application set SrvAccessAppSet to IDP policy ABC:

   user@host# set security idp idp-policy ABC rulebase-ips rule ABC match application SrvAccessAppSet

3. Specify an action for the policy. The following statement permits traffic from applications specified in the application set:

   user@host# set security idp idp-policy ABC rulebase-ips rule ABC then action no-action

4. If you are finished configuring the router, commit the configuration.
5. For more information, see the JUNOS Software CLI Reference.