security-zone

Syntax

security-zone zone-name {address-book {address address-name (ip-prefix | dns-name dns-address-name); address-set address-set-name {address address-name ;}}host-inbound-traffic {protocols { protocol-name ; protocol-name <except>;}system-services { service-name ; service-name < except >;}}interfaces interface-name {host-inbound-traffic {protocols { protocol-name ; protocol-name < except >;}system-services { service-name ; service-name < except >;}}}screen screen-name ;tcp-rst;}

Hierarchy Level

[edit security zones]

Release Information

Statement introduced in Release 8.5 of Junos OS.

Description

Define a security zone, which allows you to divide the network into different segments and apply different security options to each segment.

Options

zone-name —Name of the security zone.

The remaining statements are explained separately.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.