[Contents] [Prev] [Next] [Index] [Report an Error]

CLI Configuration

  1. Set interfaces.
    user@host# set interfaces ge-0/0/1 unit 0 family inet address 10.1.1.1/24
    user@host# set interfaces ge-0/0/2 unit 0 family inet address 1.2.2.1/24
    user@host# set interfaces ge-0/0/3 unit 0 family inet address 1.1.1.1/24
    user@host# set security zones security-zone internal interfaces ge-0/0/1.0
    user@host# set security zones security-zone dmz interfaces ge-0/0/2.0
    user@host# set security zones security-zone external interfaces ge-0/0/3.0
  2. Configure addresses.
    user@host# set security zones security-zone internal address-book address corp_net 10.1.1.0/24
    user@host# set security zones security-zone dmz address-book address mail_svr 1.2.2.5/32
    user@host# set security zones security-zone external address-book address r-mail_svr 2.2.2.5/32
  3. Configure application sets.
    user@host# set applications application-set MAIL-POP3 application junos-mail
    user@host# set applications application-set MAIL-POP3 application junos-pop3
  4. Create policies.
    user@host# set security policies from-zone internal to-zone dmz corp_net mail_svr MAIL-POP3 permit
    user@host# set security policies from-zone dmz to-zone external mail_svr r-mail_svr MAIL permit
    user@host# set security policies from-zone external to-zone dmz r-mail_svr mail_svr MAIL permit
  5. If you are finished configuring the device, commit the configuration.
  6. To check the configuration, see Verifying Policy Configuration.

[Contents] [Prev] [Next] [Index] [Report an Error]