Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


application-protocol (Applications)



Hierarchy Level

Release Information

Statement introduced before Junos OS Release 7.4.

login options introduced in Junos OS Release 7.4.

ip option introduced in Junos OS Release 8.2.

ike-esp-nat option introduced in Junos OS Release 17.1.

ras option introduced in Junos OS Release 17.1.


Identify the application protocol name. Application protocols are also called application layer gateways (ALGs). Define an application layer gateway (ALG) for a particular application. The following ALGs are supported:

protocol-name—Name of the protocol. The following protocols are supported:

  • bootp—Bootstrap protocol

  • dce-rpc—DCE RPC

  • dce-rpc-portmap—DCE RPC portmap

  • dns—Domain Name Service

  • exec—Remote Execution Protocol

  • ftp—File Transfer Protocol

  • h323—H.323

  • icmp—ICMP

  • iiop—Internet Inter-ORB Protocol

  • ike-esp-nat—IKE ALG

  • ip—IP

  • login—Login

  • netbios—NetBIOS

  • netshow—NetShow

  • pptp—Point-to-Point Tunneling Protocol

  • ras—Gatekeeper RAS for H323

  • realaudio—RealAudio

  • rpc—RPC

  • rpc-portmap—RPC portmap

  • rtsp—Real Time Streaming Protocol

  • shell—Shell

  • sip—Session Initiation Protocol

  • snmp—SNMP

  • sqlnet—SQLNet

  • talk–Talk Program

  • tftp–Trivial File Transfer Protocol

  • traceroute—Traceroute

  • winframe—WinFrame


If application-protocol is not defined, then traffic enters the ALG process as long the status for this ALG is enabled.

Required Privilege Level

system—To view this statement in the configuration.

system-control—To add this statement to the configuration.