close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

source-identity

date_range 20-Nov-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
source-identity {
    [user-or-role-name];
    any;
    authenticated-user;
    unauthenticated-user;
    unknown-user;
}

Hierarchy Level

content_copy zoom_out_map
[edit security policies from-zone zone-name to-zone zone-name policy policy-name match]

content_copy zoom_out_map
[edit security policies global policy policy-name match]

content_copy zoom_out_map
[edit security advance-policy-based-routing from-zone zone-name policy policy-name match]

Description

Identifies users and roles to be used as match criteria for a policy. If a value other than any is specified as match criteria for a policy within a zone pair, the traffic is matched to table entries to retrieve associated user and roles before policy lookup occurs. Users and roles are retrieved from the local authentication table or from a UIT pushed to the SRX Series Firewall from an access control service when a user is authenticated.

Options

The following entries specify the source identities that match a policy:

`user-or-role-name`	A list of specific users and roles. Range: 0 through 39 characters Note: SRX Series Firewalls truncate imported roles to 39 characters. You need to ensure that all of your roles are 39 characters or less.
any	Any user or role, as well as the keywords authenticated-user, unauthenticated-user, and unknown-user.
authenticated-user	All users and roles that have been authenticated.
unauthenticated-user	Any user or role that does not have an IP-address mapped to authentication sources and the authentication source is up and running.
unknown-user	Any user or role that does not have an IP address mapped to authentication sources, because the authentication source is disconnected from the SRX Series Firewall. In this case, users are unable to be authenticated due to an authentication server disconnection, such as a power outage. Unknown-user must be configured for non-domain users to be able to authenticate and log in.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 12.1. Statement updated in Junos OS Release 12.1X44-D10. Statement is supported in [edit security advance-policy-based-routing from-zone zone-name policy policy-name match] hierarchy in Junos OS Release 19.1R1.

arrow_backward PREVIOUS source-id

NEXT arrow_forward source-identity-log (Security)

Junos CLI Reference

ON THIS PAGE

source-identity

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

source-identity

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch