Applications Configuration Guidelines

You can define application protocols for the stateful firewall and Network Address Translation (NAT) services to use in match condition rules. An application protocol, or application layer gateway (ALG), defines application parameters using information from network Layer 3 and above. Examples of such applications are FTP and H.323.

To configure applications that are used with services, include the following statements at the [edit applications] hierarchy level:

application application-name {

    application-protocol protocol-name;

    destination-port port-number;

    icmp-code value;

    icmp-type value;

    inactivity-timeout value;

    learn-sip-register;

    protocol type;

    rpc-program-number number;

    sip-call-hold-timeout seconds;

    snmp-command command;

    source-port port-number;

    ttl-threshold value;

    uuid hex-value;

    }

}

application-set application-set-name {

    [ application application-names ];

}

This chapter includes the following sections:

• Configuring Application Protocol Properties
• Configuring Application Sets
• ALG Descriptions
• Verification
• JUNOS Default Groups
• Examples: Configuring Applications