Related Documentation
- J Series
- Security Zones and Interfaces Overview
- Understanding How to Identify Duplicate Sessions Using the TCP-Reset Parameter
- Example: Controlling Inbound Traffic Based on Traffic Types
- SRX Series
- Security Zones and Interfaces Overview
- Understanding How to Identify Duplicate Sessions Using the TCP-Reset Parameter
- Example: Controlling Inbound Traffic Based on Traffic Types
- Additional Information
- Junos OS Feature Support Reference for SRX Series and J Series Devices
Understanding How to Control Inbound Traffic Based on Traffic Types
This topic describes how to configure zones to specify the kinds of traffic that can reach the device from systems that are directly connected to its interfaces.
Note the following:
- You can configure these parameters at the zone level, in which case they affect all interfaces of the zone, or at the interface level. (Interface configuration overrides that of the zone.)
- You must enable all expected host-inbound traffic. Inbound traffic destined to this device is dropped by default.
- You can also configure a zone's interfaces to allow for use by dynamic routing protocols.
This feature allows you to protect the device against attacks launched from systems that are directly or indirectly connected to any of its interfaces. It also enables you to selectively configure the device so that administrators can manage it using certain applications on certain interfaces. You can prohibit use of other applications on the same or different interfaces of a zone. For example, most likely you would want to ensure that outsiders not use the Telnet application from the Internet to log into the device because you would not want them connecting to your system.
Related Documentation
- J Series
- Security Zones and Interfaces Overview
- Understanding How to Identify Duplicate Sessions Using the TCP-Reset Parameter
- Example: Controlling Inbound Traffic Based on Traffic Types
- SRX Series
- Security Zones and Interfaces Overview
- Understanding How to Identify Duplicate Sessions Using the TCP-Reset Parameter
- Example: Controlling Inbound Traffic Based on Traffic Types
- Additional Information
- Junos OS Feature Support Reference for SRX Series and J Series Devices
