[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Creating Security Zones

For best performance, always save your changes and reboot after creating a zone.

Before You Begin

For background information, read

When you configure a security zone, you can specify many of its parameters at the same time. For purposes of illustration, this section only shows how to configure zones and assign interfaces to them.

To configure a zone, you can use either J-Web or the CLI configuration editor.

This topic covers:

J-Web Configuration

To configure a zone using the J-Web configuration editor:

  1. Select Configure>CLI Tools>Point and Click CLI.
  2. Next to Security, click Configure or Edit.
  3. Next to Zones, click Configure or Edit.
  4. Next to Security zone, click Add new entry.
  5. In the Name box, type ABC and click OK.

To configure an interface and assign it to the created security zone:

  1. Corresponding to the security zone name ABC zone, click Edit.
  2. Next to Interfaces, click Add new entry.
  3. In the Interface unit box, type ge-0/0/1 and click OK.
  4. Next to Unit, click Add new entry.
  5. In the Interface unit number box, type 1.
  6. Under Family, select Inet and click OK.
  7. Next to Address book, click Configure or Edit.
  8. Next to Address, click Add new entry.
  9. In the Address name box, type 10.12.12.1/24 and click OK.
  10. If you are finished configuring the device, commit the configuration.

CLI Configuration

To configure the interface and its IP address for the ABC zone, enter the following statement in Edit mode:

user@host# set interfaces ge-0/0/1 unit 1 family inet address 10.12.12.1/24

To configure the ABC zone and assign the interface to it, enter the following statement in Edit mode:

user@host# set security zones security-zone ABC interfaces ge-0/0/1.1

If you are finished configuring the device, commit the configuration.

Related Topics

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]