Configuring A Stateless Firewall Filter With A Configuration Editor - Juniper J2300 User Manual

Task
Configure the sp–0/0/0
service interface.
From the Interfaces level
of the configuration
hierarchy, navigate
to the Inet level of
the T1 interface—the
untrusted interface in
this example—and apply
wan-service-set to the
input and output sides of
the t1–0/0/0 interface.

Configuring a Stateless Firewall Filter with a Configuration Editor

The section contains the following topics. For stateless firewall match conditions,
actions, and modifiers, see "Stateless Firewall Filter Match Conditions, Actions,
and Action Modifiers" on page 363.
J-Web Configuration Editor
1.
In the configuration editor hierarchy,
select interfaces.
2.
Next to Interface, click Add new entry.
3. In the Interface name box, type sp-0/0/0.
4.
Next to Unit, click Add new entry.
5.
In the Interface unit number box, type 0.
6. Next to Inet, select the check box.
7.
Click Configure.
8. Click OK.
1. In the configuration editor hierarchy,
select Interfaces>t1-0/0/0>
Unit>0>Family>Inet.
2.
Next to Service, click Configure.
3. Next to Input, click Configure.
4. Next to Service set, click Add new entry.
5.
In the Service set name box, type
wan-service-set.
6.
Click OK.
7. Next to Output, click Configure.
8.
Next to Service set, click Add new entry.
9. In the Service set name box, type
wan-service-set.
10. Click OK.
Stateless Firewall Filter Strategies on page 400
Configuring a Routing Engine Firewall Filter for Services and Protocols from
Trusted Sources on page 400
Configuring a Routing Engine Firewall Filter to Protect Against TCP and ICMP
Floods on page 404
Configuring a Stateless Firewall Filter with a Configuration Editor
Configuring Firewall Filters and NAT
CLI Configuration Editor
From the top of the configuration hierarchy,
configure the interface:
set interfaces sp-0/0/0 unit 0 family inet
From the top of the configuration hierarchy,
apply the service set to the interface:
set interfaces t1-0/0/0 unit 0 family inet
service input service-set wan-service-set
set interfaces t1-0/0/0 unit 0 family inet
service output service-set wan-service-set
399