Table of Contents
Advertisement
Related
Documentation
[edit security policies] Hierarchy Level
Copyright © 2016, Juniper Networks, Inc.
(destination-address <ip-address> | destination-address-name
<address-name>);
destination-port (port-or-low | <to high>);
source-address [ip-address];
source-address-name [address-name];
source-port (port-or-low <to high>);
}
then static-nat;
inet {
routing-instance (routing-instance-name | default);
}
prefix {
address-prefix;
mapped-port lower-port-range to upper-port-range;
routing-instance (routing-instance-name| default);
}
prefix-name {
address-prefix-name;
mapped-port lower-port-range to upper-port-range;
routing-instance (routing-instance-name | default);
}
rule-session-count-alarm (clear-threshold value | raise-threshold value);
}
}
}
}
}
traceoptions {
file {
filename;
files number;
match regular-expression;
(world-readable | no-world-readable);
size maximum-file-size;
}
flag flag;
no-remote-trace;
}
}
}
Security Configuration Statement Hierarchy on page 75
Understanding Logical Systems for SRX Series Services Gateways
Introduction to NAT
security {
policies {
default-policy (deny-all | permit-all);
from-zone zone-name to-zone zone-name {
policy policy-name {
description description;
Chapter 11: Configuration Statements
93
Advertisement
Table of Contents
