Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

tunnel-inspection

Syntax

Hierarchy Level

Description

Configure security inspection on VXLAN tunnels. Configure an outer policy for the outer header and an inner policy for the inner header.

Configure a tunnel inspection profile to connect the outer policy and inner policy. The tunnel inspection profile is attached to the outer policy and it points to a group of inner policies (policy set). When the packet matchs the outer policy, the SRX device decapsulates the packet to get the inner header. Using inner packet content along with the attached tunnel inspection profile of outer policy, the second policy lookup gets the desired inner policy applies the security services to inner packet.

Options

inspection-profile

Configure a tunnel inspection profile to connect the outer policy and inner policy.

vni

Configure VXLAN Network Identifier for tunnel inspection.

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security

Release Information

Statement introduced in Junos OS Release 20.4R1.