Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Task 3: Configure Applications

Applications are the services or apps that your network users will connect to. You can select applications by category (such as Social Media), select individual applications (such as Microsoft Teams) from a list, or create a custom application to describe anything that is not otherwise available. For the latter, you define the app by specifying a combination of its IP address, port (or port range), and protocol (TCP or UDP). We will associate these applications with the users/networks that we set up in Task 2, and assign a traffic steering policy and access rule (Allow/Deny).

To set up applications,

  1. In the Juniper Mist menu, click Organization > WAN | Applications. A list of existing applications, if any, appears.
  2. Click the Add Application button in the upper right corner. The Add Application window appears, as shown here.
  3. Give the application a name. In our case, we’ll create an application called guest-web to allow guest access to the Internet.
  4. For Type, choose the Custom Apps option.
  5. Skip the IP Address and Domain Names field for this case.
  6. Click the Protocol drop down and select TCP.
  7. Type 80 for both the Start Port and End Port.
  8. Click the blue + icon and type 443 for both the Start Port and End Port.
  9. For Traffic Type, under Advanced Settings, keep Default.
  10. Click Save.
  11. Use the table below to add the remaining applications we need for this example.
    • Click the Add Application button to open a new screen, and the Add button to add it to the application list.
    • To add more than one protocol, click the blue + icon.
    • For Advanced Settings, use Default for all the applications.

Applications

Name IP_Address Protocol Start_Port End_Port
Any 0.0.0.0/0 any <null> <null>
dc-srvr-ping 10.11.0.2/32 ICMP <null> <null>
dc-srvr-ssh 10.0.0.10/32 TCP 22 22
public-dns 8.8.8.8/32,8.8.4.4/32,1.1.1.1/32,1.0.0.1/32 UDP 53 53
spoke-corp-agg 10.10.0.0/16 any <null> <null>
trust-srvr1 192.168.1.10/32 TCP 22 22
untrust-srvr 8.8.8.8/32,1.1.1.1/32 TCP

TCP

80

443

80

443

untrust-srvr1 8.8.8.8/32,1.1.1.1/32 any <null> <null>