close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

zones

date_range 20-Nov-23

arrow_backward

arrow_forward

Syntax

zones {
    functional-zone {
        management {
            description text;
            host-inbound-traffic {
                protocols protocol-name {
                                     except;
                }
                system-services service-name {
                                     except;
                }
            }
            interfaces interface-name  {
                host-inbound-traffic {
                    protocols protocol-name {
                                           except;
                    }
                    system-services service-name {
                                           except;
                    }
                }
            }
            screen screen-name;
        }
    }
    security-zone zone-name {
        address-book {
            address address-name {
                ip-prefix {
                    description text;
                }
                description text;
                dns-name domain-name {
                    ipv4-only;
                    ipv6-only;
                }
                range-address lower-limit to upper-limit;
                wildcard-address ipv4-address/wildcard-mask;
            }
            address-set address-set-name {
                address address-name;
                address-set address-set-name;
                description text;
            }
        }
        advance-policy-based-routing;
        application-tracking;
        description text;
        host-inbound-traffic {
            protocols protocol-name {
                               except;
            }
            system-services service-name {
                               except;
            }
        }
        interfaces interface-name {
            host-inbound-traffic {
                protocols protocol-name {
                                     except;
                }
                system-services service-name {
                                     except;
                }
            }
        }
        screen screen-name;
        tcp-rst;
    }
}

Hierarchy Level

content_copy zoom_out_map
[edit security]

Description

A zone is a collection of interfaces for security purposes. All interfaces in a zone are equivalent from a security point of view. Configure the following zones:

Functional zone—Special-purpose zone, such as a management zone that can host dedicated management interfaces.
Security zone—Most common type of zone that is used as a building block in policies.

Options

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 8.5. Support for wildcard addresses added in Junos OS Release 11.1. The description option added in Junos OS Release 12.1.

arrow_backward PREVIOUS zone (System Security Profile)

NEXT arrow_forward | (pipe)

Junos CLI Reference

ON THIS PAGE

zones

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

zones

Syntax

Hierarchy Level

Description

Options

Required Privilege Level

Release Information

Related Documentation

Stay in touch