network_stuff:juniper:srx
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| network_stuff:juniper:srx [2017/09/11 10:30] – jotasandoku | network_stuff:juniper:srx [2023/11/02 14:38] (current) – external edit 127.0.0.1 | ||
|---|---|---|---|
| Line 75: | Line 75: | ||
| ---- | ---- | ||
| **BGP SRX**\\ | **BGP SRX**\\ | ||
| - | Get inspiration | + | To get inspiration: |
| - | * Disable flow mode and enable packet mode: [[http:// | + | \\ |
| + | See this [[https:// | ||
| + | * Disable flow mode and enable packet mode: [[http:// | ||
| + | configure | ||
| + | delete security | ||
| + | < confirm this will delete everything below this level> | ||
| + | set security forwarding-options family mpls mode packet-based | ||
| + | commit and-quit | ||
| + | request system reboot | ||
| * Define irb gateway | * Define irb gateway | ||
| * policy options | * policy options | ||
| Line 83: | Line 92: | ||
| * vlans? | * vlans? | ||
| * irb export term (called iBGP-export in the slingshots) | * irb export term (called iBGP-export in the slingshots) | ||
| + | |||
| + | Note that in packet mode, no security policies are allowed, no point on defining zones either.. [[http:// | ||
| + | |||
| + | |||
| + | If we are in flow mode, To allow communication: | ||
| + | Put all interfaces in the same zone: | ||
| + | |||
| + | set security zones security-zone trust interface ge-0/0/2.0 | ||
| + | set security zones security-zone trust interface ge-0/0/3.0 | ||
| + | |||
| + | Create a policy to permit intra-zone traffic. | ||
| + | |||
| + | set security policies from-zone trust to-zone trust policy trust-to-trust match source-address any destination address any application any | ||
| + | set security policies from-zone trust to-zone trust policy trust-to-trust then permit | ||
| + | |||
| + | |||
| + | ---- | ||
| + | |||
| + | **SRX DIRECTORIES**\\ | ||
| + | * /junos : This is a read-only dir created in runtime by malloc. Expected to be 100%. See [[https:// | ||
network_stuff/juniper/srx.1505125834.txt.gz · Last modified: (external edit)
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
