Task 3: Configure Applications
Applications are the services or apps that your network users will connect to. You can select applications by category (such as Social Media), select individual applications (such as Microsoft Teams) from a list, or create a custom application to describe anything that is not otherwise available. For the latter, you define the app by specifying a combination of its IP address, port (or port range), and protocol (TCP or UDP). We will associate these applications with the users/networks that we set up in Task 2, and assign a traffic steering policy and access rule (Allow/Deny).
To set up applications,
- In the Juniper Mist menu, click Organization > WAN | Applications. A list of existing applications, if any, appears.
- Click the Add Application button in the upper right corner. The Add
Application window appears, as shown here.
- Give the application a name. In our case, we’ll create an application called guest-web to allow guest access to the Internet.
- For Type, choose the Custom Apps option.
- Skip the IP Address and Domain Names field for this case.
- Click the Protocol drop down and select TCP.
- Type 80 for both the Start Port and End Port.
- Click the blue + icon and type 443 for both the Start Port and End Port.
- For Traffic Type, under Advanced Settings, keep Default.
- Click Save.
- Use the table below to add the remaining applications we need for this example.
- Click the Add Application button to open a new screen, and the Add button to add it to the application list.
- To add more than one protocol, click the blue + icon.
- For Advanced Settings, use Default for all the applications.
Applications
Name | IP_Address | Protocol | Start_Port | End_Port |
Any | 0.0.0.0/0 | any | <null> | <null> |
dc-srvr-ping | 10.11.0.2/32 | ICMP | <null> | <null> |
dc-srvr-ssh | 10.0.0.10/32 | TCP | 22 | 22 |
public-dns | 8.8.8.8/32,8.8.4.4/32,1.1.1.1/32,1.0.0.1/32 | UDP | 53 | 53 |
spoke-corp-agg | 10.10.0.0/16 | any | <null> | <null> |
trust-srvr1 | 192.168.1.10/32 | TCP | 22 | 22 |
untrust-srvr | 8.8.8.8/32,1.1.1.1/32 | TCP TCP |
80 443 |
80 443 |
untrust-srvr1 | 8.8.8.8/32,1.1.1.1/32 | any | <null> | <null> |