[Contents]
[Prev]
[Next]
[Index]
[Report an Error]
CLI Configuration
- Set interfaces.
- user@host# set interfaces ge-0/0/1 unit 0 family inet
address 10.1.1.1/24
- user@host# set interfaces ge-0/0/2 unit 0 family inet
address 1.2.2.1/24
- user@host# set interfaces ge-0/0/3 unit 0 family inet
address 1.1.1.1/24
- user@host# set security zones security-zone internal
interfaces ge-0/0/1.0
- user@host# set security zones security-zone dmz interfaces
ge-0/0/2.0
- user@host# set security zones security-zone external
interfaces ge-0/0/3.0
- Configure addresses.
- user@host# set security zones security-zone internal
address-book address corp_net 10.1.1.0/24
- user@host# set security zones security-zone dmz address-book
address mail_svr 1.2.2.5/32
- user@host# set security zones security-zone external
address-book address r-mail_svr 2.2.2.5/32
- Configure application sets.
- user@host# set applications application-set MAIL-POP3
application junos-mail
- user@host# set applications application-set MAIL-POP3
application junos-pop3
- Create policies.
- user@host# set security policies from-zone internal
to-zone dmz corp_net mail_svr MAIL-POP3 permit
- user@host# set security policies from-zone dmz to-zone
external mail_svr r-mail_svr MAIL permit
- user@host# set security policies from-zone external
to-zone dmz r-mail_svr mail_svr MAIL permit
- If you are finished configuring the device, commit the
configuration.
- To check the configuration, see Verifying Policy Configuration.
[Contents]
[Prev]
[Next]
[Index]
[Report an Error]