Juniper J2300 User Manual page 426

J-series™ Services Router User Guide
Task
Define accept-all-term for
to-wan-rule.
Define an action for
accept-all-term. The action
is taken only if a packet
does not match app-term.
Define from-wan-rule and
set its match direction.
Define wan-src-addr-term
for the from-wan-rule rule.
Define the match condition
for wan-src-addr-term.
Define an action for
wan-src-addr-term.
Define discard-all-term for
from-wan-rule.
Define an action for
discard-all-term. The
action is taken only if a
packet does not match
wan-src-addr-term.
396
Configuring a Stateful Firewall Filter with a Configuration Editor
J-Web Configuration Editor
1.
On the Rule to-wan-rule page, next to
Term, click Add new entry.
2.
In the Term name box, type
accept-all-term.
1.
Next to Then, click Configure.
2. From the Designation drop-down list,
select Accept.
3. Next to Accept, select the check box.
4.
Click OK three times.
1.
On the Rule page, next to Rule, click Add
new entry.
2.
In the Rule name box, type from-wan-rule.
3. From the Match direction drop-down list,
select input.
1. Next to Term, click Add new entry.
2.
In the Term name box, type
wan-src-addr-term.
1.
Next to From, click Configure.
2. Next to Source address, click Add new
entry.
3. From the Address drop-down list, select
Enter Specific Value—>.
4. In the Prefix box, type 192.168.33.0/24.
5.
Click OK twice.
1.
On the Term wan-src-addr-term page, next
to Then, click Configure.
2. In the Designation drop-down list, select
Accept.
3.
Click OK twice.
1. On the Rule from-wan-rule page, next to
Term, click Add new entry.
2. In the Term name box, type
discard-all-term.
1. Next to Then, click Configure.
2.
From the Designation drop-down list,
select Discard.
3.
Click OK three times.
CLI Configuration Editor
Set the term name and the action:
set rule to-wan-rule term accept-all-term then
accept
Set the rule name, match direction, term
name, and the match condition:
set rule from-wan-rule match-direction input
term wan-src-addr-term from source-address
192.168.33.0/24
Set the action:
set rule from-wan-rule term wan-src-addr-term
then accept
Set the term name and the action:
set rule from-wan-rule term discard-all-term
then discard