[Contents]
[Prev]
[Next]
[Index]
[Report an Error]
protocols
See the following sections:
protocols (Interface Host-Inbound Traffic)
Syntax
- protocols {
-
protocol-name ;
-
protocol-name <except>;
- }
Hierarchy Level
- [edit security zones security-zone zone-name interfaces interface-name host-inbound-traffic]
Release Information
Statement introduced in Release 8.5
of JUNOS software.
Description
Specify the types of routing protocol
traffic that can reach the device on a per-interface basis.
This statement is
supported on J-series and SRX-series devices.
Options
-
protocol-name —Protocol for which traffic
is allowed. The following protocols are supported:
-
all—Enable traffic
from all possible protocols available.
-
bfd—Enable incoming
Bidirectional Forwarding Detection (BFD) Protocol traffic.
-
bgp—Enable incoming
BGP traffic.
-
dvmrp—Enable
incoming Distance Vector Multicast Routing Protocol (DVMRP) traffic.
-
igmp—Enable
incoming Internet Group Management Protocol (IGMP) traffic.
-
ldp—Enable incoming
Label Distribution Protocol (LDP) traffic (UDP and TCP port 646).
-
msdp—Enable
incoming Multicast Source Discovery Protocol (MSDP) traffic.
-
nhrp—Enable
incoming Next Hop Resolution Protocol (NHRP) traffic.
-
ospf—Enable
incoming OSPF traffic.
-
pgm—Enable incoming
Pragmatic General Multicast (PGM) protocol traffic (IP protocol number
113).
-
pim—Enable incoming
Protocol Independent Multicast (PIM) traffic.
-
rip—Enable incoming
RIP traffic.
-
router-discovery—Enable
incoming router discovery traffic.
-
rsvp—Enable
incoming Resource Resolution Protocol (RSVP) traffic (IP protocol
number 46).
-
sap— Enable
incoming Session Announcement Protocol (SAP) traffic. SAP always listens
on 224.2.127.254:9875.
-
vrrp—Enable
incoming Virtual Router Redundancy Protocol (VRRP) traffic.
-
except—(Optional) except can only be used if
all has been defined.
Usage Guidelines
For configuration instructions and
examples, see the JUNOS Software Security Configuration
Guide.
Required Privilege Level
security—To view this statement
in the configuration.
security-control—To
add this statement to the configuration.
protocols (Zone Host-Inbound Traffic)
Syntax
- protocols {
-
protocol-name ;
-
protocol-name <except>;
- }
Hierarchy Level
- [edit security zones security-zone zone-name host-inbound-traffic]
Release Information
Statement introduced in Release 8.5
of JUNOS software.
Description
Specify the types of traffic that can
reach the device for all interfaces in a zone.
This statement is
supported on J-series and SRX-series devices.
Options
-
protocol-name —Protocol for which traffic
is allowed. The following protocols are supported:
-
all—Enable traffic
from all possible protocols available.
-
bfd—Enable incoming
Bidirectional Forwarding Detection (BFD) protocol traffic.
-
bgp—Enable incoming
BGP traffic.
-
dvmrp—Enable
incoming Distance Vector Multicast Routing Protocol (DVMRP) traffic.
-
igmp—Enable
incoming Internet Group Management Protocol (IGMP) traffic.
-
ldp—Enable incoming
Label Distribution Protocol (LDP) traffic (UDP and TCP port 646).
-
msdp—Enable
incoming Multicast Source Discovery Protocol (MSDP) traffic.
-
nhrp—Enable
incoming Next Hop Resolution Protocol (NHRP) traffic.
-
ospf—Enable
incoming OSPF traffic.
-
pgm—Enable incoming
Pragmatic General Multicast (PGM) protocol traffic (IP protocol number
113).
-
pim—Enable incoming
Protocol Independent Multicast (PIM) traffic.
-
rip—Enable incoming
RIP traffic.
-
router-discovery—Enable
incoming router discovery traffic.
-
rsvp—Enable
incoming Resource Reservation Protocol (RSVP) traffic (IP protocol
number 46).
-
sap— Enable
incoming Session Announcement Protocol (SAP) traffic. SAP always listens
on 224.2.127.254:9875. New addresses and ports
can be added dynamically. This information must be propagated to the
Packet Forwarding Engine (PFE).
-
vrrp—Enable
incoming Virtual Router Redundancy Protocol (VRRP) traffic.
-
except—(Optional) except can only be used if
all has been defined.
Usage Guidelines
For configuration instructions and
examples, see the JUNOS Software Security Configuration
Guide.
Required Privilege Level
security—To view this statement
in the configuration.
security-control—To
add this statement to the configuration.
[Contents]
[Prev]
[Next]
[Index]
[Report an Error]