Juniper J2300 User Manual page 428

J-series™ Services Router User Guide
Table 154: Applying a Stateful Firewall Filter and NAT to an Interface
Task
Navigate to the Services
level in the configuration
hierarchy.
Define wan-service-set and
assign the stateful firewall
filter rule to-wan-rule to the
service set.
Assign the stateful firewall
filter rule from-wan-rule to
the service set.
Assign the NAT rule
nat-to-wan-rule to the
service set.
Define the service
set type and virtual
interface sp–0/0/0 as
the service interface for
wan-service-set.
398
Configuring a Stateful Firewall Filter with a Configuration Editor
J-Web Configuration Editor
1. In the configuration editor hierarchy,
select Services.
1. Next to Service set, click Add new entry.
2.
In the Service set name box, type
wan-service-set.
3.
From the Stateful firewall rules choice
drop-down list, select Stateful firewall
rules.
4. Next to Stateful firewall rules, click Add
new entry.
5.
In the Rule name box, type to-wan-rule.
6. Click OK.
1. Next to Stateful firewall rules, click Add
new entry.
2. In the Rule name box, type from-wan-rule.
3.
Click OK.
1. From the Nat rules choice drop-down list,
select Nat rules.
2. Next to Nat rules, click Add new entry.
3.
In the Rule name box, type nat-to-wan-rule.
4. Click OK.
1. From the Service type choice drop-down
list, select Interface service.
2.
Next to Interface service, click Configure.
3. In the Service interface box, type
sp-0/0/0.
4. Click OK.
CLI Configuration Editor
From the top of the configuration hierarchy,
enter edit services.
Define the service set and assign the rule:
set service-set wan-service-set
stateful-firewall-rules to-wan-rule
Define the service set and assign the rule:
set service-set wan-service-set
stateful-firewall-rules from-wan-rule
Assign the rule to the service set:
set service-set wan-service-set nat-rules
nat-to-wan-rule
Define the service set type and the service
interface:
set service-set wan-service-set
interface-service service-interface sp-0/0/0