Home
Juniper
Network Hardware
Junos OS
Juniper Junos OS User Manual
5
of 1
of 1 rating
158 pages
Give review
Manual
Specs
To Next Page
To Next Page
To Previous Page
To Previous Page
Loading...
Send reset for non-SYN session TCP packets: Off
Policy configurable: Yes
Interfaces bound: 1
Interfaces:
ge-0/0/1.0
Sampl
e
Output
show
security
zones
terse
user@host>
show
security
zones
ters
e
Zone Type
my-internal Security
my-external Security
dmz Security
Cop
yright
©
2016,
Juniper
Netw
orks,
Inc.
132
Getting
S
tarted
Guide
f
or
Branch
SRX
S
eries
147
149
Table of Contents
Default Chapter
3
Table of Contents
3
List of Figures
7
About the Documentation
11
Documentation and Release Notes
11
Supported Platforms
11
Using the Examples in this Manual
11
Merging a Full Example
12
Merging a Snippet
12
Documentation Conventions
13
About the Documentation
13
Table 1: Notice Icons
13
Table 2: Text and Syntax Conventions
13
Documentation Feedback
15
Requesting Technical Support
15
Self-Help Online Tools and Resources
15
Opening a Case with JTAC
16
Overview
17
Chapter 1 Introduction to SRX Series Devices
19
SRX Series Overview
19
Chapter 2 Understanding Factory Default Configuration Settings
21
Chapter 3 Configuring an SRX Series Device for the First Time
21
Setting up a Branch SRX Series Services Gateway
21
Understanding Factory Default Configuration Settings
23
Understanding Factory Default Configuration Settings of an SRX210
23
Default Configuration Topology
23
Default Port Settings
24
Figure 1: SRX210 Deployment Topology
24
Default Settings for Interfaces, Zones, Policy, and NAT
25
Table 3: Default Interfaces Settings
25
Table 4: Default Security Policy Settings
25
Default System Services
26
Autoinstallation
26
SRX210 Factory Default Settings-A Sample
26
Table 5: Default NAT Settings
26
Configuring an SRX Series Device for the First Time
33
Understanding Methods to Manage the Branch SRX Series
33
Mandatory Settings to Configure the Branch SRX Series
34
Time
34
Configuring a Hostname to Identify a Branch SRX Series Services Gateway in
34
Table 6: Settings Used to Configure the SRX210
34
Configuring an SRX Series Device for the First Time
35
Your Network
36
Configuring Internet Access for the Branch SRX Series
37
Figure 2: Connecting an SRX210 to the Internet
37
Configuring a Network Time Protocol Server for the Branch SRX Series
38
Validating the Branch SRX Series Configuration
39
Verifying the Branch SRX Series Configuration
40
Chapter 4 Resetting the SRX Series Device
43
Resetting the Branch SRX Series
43
Resetting Your Branch SRX Series
43
Resetting Your SRX Series to a Rescue Configuration
43
Resetting Your SRX Series to Factory Settings
43
Configuring Basic SRX Series Features
45
Chapter 5 Configuring Security Zones and Policies for SRX Series
45
Configuring UTM for Branch SRX Series
45
Configuring Security Zones and Policies for SRX Series
47
Understanding Security Zones and Policies for SRX Series
47
Zones
47
Security Policy
48
Example: Configuring Security Zones and Policies for SRX Series
48
Table 7: Factory-Default Settings for Security Policies for Branch SRX Series
48
Figure 3: Topology for Security Policy Configuration
49
Configuring Security Zones and Policies for SRX Series
49
Table 8: Address Books Configuration
49
Table 9: Security Policy Configuration
50
Chapter 6 Configuring NAT for SRX Series
55
Understanding NAT for SRX Series
55
Example: Configuring Destination NAT for SRX Series
56
Configuring NAT for SRX Series
57
Figure 4: Destination NAT Single Address Translation
57
Table 10: Destination NAT Mapping
57
Configuring NAT for SRX Series
61
Chapter 7 Managing Licenses for SRX Series
63
Updating Licenses for a Branch SRX Series
63
Chapter 8 Configuring UTM for Branch SRX Series
65
Understanding Unified Threat Management for Branch SRX Series
65
Table 11: Default UTM Profiles on Branch SRX Series
66
Example: Configuring Unified Threat Management for a Branch SRX Series
67
Default UTM Policy for Branch SRX Series
70
Default UTM Policy
70
Predefined UTM Profile Configuration for Branch SRX Series
70
Antispam
70
Antivirus
71
Web Filtering
72
Chapter 9 Configuring Intrusion Detection and Prevention for SRX Series
79
Understanding Intrusion Detection and Prevention for SRX Series
79
Example: Configuring Intrusion Detection and Prevention for SRX Series
80
Chapter 10 Understandingstatefulfirewall,Ipsecvpn,Andchassisclusterfor
87
Branch SRX Series
87
Understanding Branch SRX Series Stateful Firewall Functionality
87
Understanding Ipsec VPN for SRX Series
88
Understanding Chassis Cluster for SRX Series
88
Configuration Statements and Operational Commands
89
Configuration Statements
91
Security Configuration Statement Hierarchy
91
Chapter 11 Configuration Statements
91
[Edit Security Address-Book] Hierarchy Level
92
[Edit Security Idp] Hierarchy Level
93
[Edit Security Ike] Hierarchy Level
103
[Edit Security Ipsec] Hierarchy Level
104
[Edit Security Nat] Hierarchy Level
106
[Edit Security Policies] Hierarchy Level
109
[Edit Security Utm] Hierarchy Level
114
[Edit Security Zones] Hierarchy Level
121
Chapter 12 Operational Commands
123
Request System License Update
124
Show Security Flow Session
125
Operational Commands
125
Table 12: Show Security Flow Session Output Fields
126
Show Security Idp Active-Policy
131
Table 13: Show Security Idp Active-Policy Output Fields
131
Show Security Idp Status
132
Table 14: Show Security Idp Status Output Fields
132
Show Security Nat Destination Summary
134
Table 15: Show Security Nat Destination Summary Output Fields
134
Show Security Policies
136
Table 16: Show Security Policies Output Fields
137
Show Security Utm Session
144
Show Security Utm Status
145
Show Security Zones
146
Table 17: Show Security Zones Output Fields
146
Show System License (View)
149
Table 18: Show System License Output Fields
149
Show System Services Dhcp Client
152
Table 19: Show System Services Dhcp Client Output Fields
152
Part 5 Index
155
Index
157
5
Based on 1 rating
Ask a question
Give review
Questions and Answers:
Need help?
Do you have a question about the Juniper Junos OS and is the answer not in the manual?
Ask a question
Juniper Junos OS Specifications
General
Brand
Juniper
Model
Junos OS
Category
Network Hardware
Language
English
Related product manuals
Juniper JUNOS OS 10.4
200 pages
JUNOS OS 10.3 - SYSTEM LOG MESSAGES REFERENCE 7-12-2010
748 pages
Juniper ACX7100
12 pages
Juniper MX10004
14 pages
Juniper CTP2024
150 pages
Juniper MX10016
32 pages
Juniper Mist Edge
9 pages
Juniper CTP1000 Series
150 pages
Juniper BTI7800 Series
228 pages
Juniper Day One+ QFX5120
12 pages
Juniper MX240 - UPGRADING
35 pages
Juniper Day One Plus SRX380
9 pages
To Next PageTo Next PageTo Previous PageTo Previous Page
Loading...
Need help?
General
