default-policy

Syntax

default-policy {(deny-all | permit-all);}

Hierarchy Level

[edit security policies]

Release Information

Statement introduced in Release 8.5 of Junos OS.

Description

Configure the default security policy that defines the actions the device takes on a packet that does not match any user-defined policy.

Options

deny-all—Deny all traffic. Packets are dropped. This is the default.

permit-all—Permit all traffic that does not match a policy.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.