active-policy
Syntax
active-policy policy-name;
Hierarchy Level
[edit security idp]
Description
Specify which policy among the configured policies to activate.
Options
policy-name—Name of the active policy.
You need to make sure the active policy is enforced in the data plane.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 9.2.
Starting with Junos
OS Release 18.2R1, IDP policy is directly assigned in the security
policy rule. This is to simplify IDP policy usage and to provide flexibility
to have multiple policies active at the same time. As a part of session
interest check IDP will enabled if IDP policy is present in any of
the matched rules. IDP policy is activated in security policies, by
permitting the IDP policy within the application services using the set security policies from-zone zone-name to-zone zone-name policy
policy-name then permit application-services idp-policy idp-policy-name command. Since IDP policy name is directly use in the security
policy rule, the [edit security idp active-policy policy-name] statement is deprecated.