close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

security-zone

date_range 23-Nov-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
security-zone zone-name {
    address-book {
        address address-name {
            ip-prefix {
                description text;
            }
            description text;
            dns-name domain-name {
                ipv4-only;
                ipv6-only;
            }
            range-address lower-limit to upper-limit;
            wildcard-address ipv4-address/wildcard-mask;
        }
        address-set address-set-name {
            address address-name;
            address-set address-set-name;
            description text;
        }
    }
    advance-policy-based-routing;
    application-tracking;
    description text;
    enable-reverse-reroute;
    host-inbound-traffic {
        protocols protocol-name {
                           except;
        }
        system-services service-name {
                           except;
        }
    }
    interfaces interface-name {
        host-inbound-traffic {
            protocols protocol-name {
                                 except;
            }
            system-services service-name {
                                 except;
            }
        }
    }
    screen screen-name;
    source-identity-log;
    tcp-rst;
    unidirectional-session-refreshing;
    white-list white-list name;
}

Hierarchy Level

content_copy zoom_out_map
[edit security zones]

Description

Define a security zone, which allows you to divide the network into different segments and apply different security options to each segment.

Options

zone-name—Name of the security zone.

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 8.5.

Support for wildcard addresses added in Junos OS Release 11.1.

The description option added in Junos OS Release 12.1.

The unidirectional-seesion-refreshing option added in Junos OS Release 20.4R1.

The white-list option added in Junos OS Release 23.4R1.

arrow_backward PREVIOUS security-to-group

NEXT arrow_forward segment

Junos CLI Reference

ON THIS PAGE

security-zone

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

security-zone

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch