Juniper SRX550 Hardware Manual page 157

Related
Documentation
Copyright © 2016, Juniper Networks, Inc.
[edit]
admin# set security zones security-zone untrust interfaces ge-0/0/0
admin# set security zones security-zone trust interfaces ge-0/0/1
admin# set security zones security-zone trust interfaces ge-0/0/1.0
host-inbound-traffic system-services all
admin# set security zones security-zone trust interfaces ge-0/0/1.0
host-inbound-traffic protocols all
Configure basic security policies.
13.
[edit]
admin# set security policies from-zone trust to-zone untrust policy policy-name match
source-address any destination-address any application any
admin# set security policies from-zone trust to-zone untrust policy policy-name then
permit
Create a Network Address Translation (NAT) rule for source translation of all
14.
Internet-bound traffic.
[edit]
admin# set security nat source rule-set interface-nat from zone trust
admin# set security nat source rule-set interface-nat to zone untrust
admin# set security nat source rule-set interface-nat rule rule1 match source-address
0.0.0.0/0 destination-address 0.0.0.0/0
admin# set security nat source rule-set interface-nat rule rule1 then source-nat interface
Check the configuration for validity.
15.
[edit]
admin# commit check
configuration check succeeds
Commit the configuration to activate it on the device.
16.
[edit]
admin# commit
commit complete
Optionally, display the configuration to verify that it is correct.
17.
[edit]
admin# show
Optionally, configure additional properties by adding the necessary configuration
18.
statements. Then commit the changes to activate them on the services gateway.
[edit]
admin@device# commit
When you have finished configuring the services gateway, exit configuration mode.
19.
[edit]
admin@device# exit
admin@device>
Connecting to the SRX550 High Memory Services Gateway from the CLI Locally on
page 131
Connecting to the SRX550 High Memory Services Gateway from the CLI Remotely on
page 133
Chapter 18: Performing Initial Configuration
135