Figure 266: M7I Router Cfeb; Figure 267: M7I Router Cfeb With Asp-I - Juniper M Series Monitoring And Troubleshooting Manual

M Series and T Series Routers Monitoring and Troubleshooting Guide
520

Figure 266: M7i Router CFEB

Figure 267 on page 520 shows the M7i router CFEB with ASP-I.

Figure 267: M7i Router CFEB with ASP-I

The ASP–I is an optional component of the CFEB. The ASP–I is similar to the standalone
Adaptive Services PIC, but operates at a reduced bandwidth. The ASP–I enables you to
perform one or more services on the same PIC by configuring a set of services and
applications.
The ASP–I provides the following services:
Stateful firewall—A type of firewall filter that considers state information derived from
previous communications and other applications when evaluating traffic.
Network Address Translation (NAT)—A security procedure for concealing host
addresses on a private network behind a pool of public addresses.
Intrusion detection services (IDS)—A set of tools for detecting, redirecting, and
preventing certain kinds of network attack and intrusion.
The configuration for these three services comprises a series of rules that you can arrange
in order of precedence as a rule set. Each rule follows the structure of a firewall filter,
with a from statement containing input or match conditions and a
containing actions to be taken if the match conditions are met. For information about
then statement
Copyright © 2012, Juniper Networks, Inc.