Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


advance-policy-based-routing-profile (Security Zones)


Hierarchy Level

[edit security zones security-zone zone-name]


Enable Advance Policy Based Routing on the specified security zone.

To classify and redirect the traffic, the APBR profile matches applications and application groups and if the matching rule is found, the packets are routed to the routing instance that sends the traffic to a different interface as specified in the next-hop IP address. So, you must associate the application profile to the ingress traffic—that is, attach the application profile to a security zone.

When the application profile is applied to a security zone, then all interfaces belonging to that zone are attached to the application profile by default unless there is a specific configuration for an interface belonging to that zone.

Required Privilege Level

services—To view this statement in the configuration.

services-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 15.1X49-D60.