[Contents] [Prev] [Next] [Index] [Report an Error]

security-zone

Syntax



security-zone              zone-name            {


address-book {
address  
             address-name (ip-prefix |      
       dns-name                dns-address-name);                        



address-set                  address-set-name          
     {
address  
               address-name               ;
}


}




host-inbound-traffic {


protocols {
               
                 protocol-name             
 ;
               
                 protocol-name             
  <except>;
}




system-services {
               
                 service-name               ;
               
                 service-name                <                 except 
             >;
}


}




interfaces                interface-name              {


host-inbound-traffic {


protocols {
                 
                   protocol-name           
     ;
                 
                   protocol-name           
      <                   except                 >;
}




system-services {
                 
                   service-name            
    ;
                 
                   service-name            
     <                   except                 >;
}


}


}


screen  
           screen-name           ;
tcp-rst;
}

Hierarchy Level



[edit security zones]

Release Information

Statement introduced in Release 8.5 of JUNOS software.

Description

Define a security zone, which allows you to divide the network into different segments and apply different security options to each segment.

This statement is supported on J-series and SRX-series devices.

Options

zone-name —Name of the security zone.
The remaining statements are explained separately.

Usage Guidelines

For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

[Contents] [Prev] [Next] [Index] [Report an Error]