Juniper CX111 Handbuch PDF herunterladen (Seite 8)

APPLICATION NOTE - Configuring the CX111 for J Series and Branch SRX Series Devices

source-address 0.0.0.0/0

set security nat source rule-set trust-to-untrust rule source-nat-rule then

source-nat interface

/* NAT rule used for management access to the CX111*/

set security nat source rule-set trust-to-management from zone trust

set security nat source rule-set trust-to-management to zone management

set security nat source rule-set trust-to-management rule nat-to-CX111 match

source-address 0.0.0.0/0

set security nat source rule-set trust-to-management rule nat-to-CX111 match

destination-address 0.0.0.0/0

set security nat source rule-set trust-to-management rule nat-to-CX111 then

source-nat interface

/* Security policies and zones */

set security zones security-zone trust host-inbound-traic system-services all

set security zones security-zone trust host-inbound-traic protocols all

set security zones security-zone trust interfaces vlan.0

set security zones security-zone untrust interfaces vlan.2 host-inbound-traic

system-services dhcp

set security zones security-zone untrust interfaces vlan.2 host-inbound-traic

system-services tftp

set security zones security-zone management interfaces vlan.3900

set security policies from-zone trust to-zone untrust policy trust-to-untrust

match source-address any

set security policies from-zone trust to-zone untrust policy trust-to-untrust

match destination-address any

set security policies from-zone trust to-zone untrust policy trust-to-untrust

match application any

set security policies from-zone trust to-zone untrust policy trust-to-untrust

then permit