}
screen {
ids-option untrust-screen {
icmp {
ping-death;
}
ip {
source-route-option;
tear-drop;
}
tcp {
syn-flood {
alarm-threshold 1024;
attack-threshold 200;
source-threshold 1024;
destination-threshold 2048;
timeout 20;
}
land;
}
}
}
zones {
security-zone trust {
host-inbound-traffic {
system-services {
all;
}
protocols {
all;
}
}
interfaces {
vlan.0;
}
}
security-zone untrust {
interfaces {
ge-0/0/0.0 {
host-inbound-traffic {
system-services {
dhcp;
tftp;
}
}
}
}
screen untrust-screen;
}
}
policies {
from-zone trust to-zone untrust {
policy trust-to-untrust {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
93
Copyright © 2015, Juniper Networks, Inc.
Chapter 15: Performing Initial Configuration
Summary of Contents for SRX240 Series
Page 8: ...Copyright 2015 Juniper Networks Inc viii SRX240 Services Gateway Hardware Guide ...
Page 18: ...Copyright 2015 Juniper Networks Inc xviii SRX240 Services Gateway Hardware Guide ...
Page 20: ...Copyright 2015 Juniper Networks Inc 2 SRX240 Services Gateway Hardware Guide ...
Page 26: ...Copyright 2015 Juniper Networks Inc 8 SRX240 Services Gateway Hardware Guide ...
Page 30: ...Copyright 2015 Juniper Networks Inc 12 SRX240 Services Gateway Hardware Guide ...
Page 46: ...Copyright 2015 Juniper Networks Inc 28 SRX240 Services Gateway Hardware Guide ...
Page 58: ...Copyright 2015 Juniper Networks Inc 40 SRX240 Services Gateway Hardware Guide ...
Page 62: ...Copyright 2015 Juniper Networks Inc 44 SRX240 Services Gateway Hardware Guide ...
Page 64: ...Copyright 2015 Juniper Networks Inc 46 SRX240 Services Gateway Hardware Guide ...
Page 76: ...Copyright 2015 Juniper Networks Inc 58 SRX240 Services Gateway Hardware Guide ...
Page 80: ...Copyright 2015 Juniper Networks Inc 62 SRX240 Services Gateway Hardware Guide ...
Page 86: ...Copyright 2015 Juniper Networks Inc 68 SRX240 Services Gateway Hardware Guide ...
Page 96: ...Copyright 2015 Juniper Networks Inc 78 SRX240 Services Gateway Hardware Guide ...
Page 120: ...Copyright 2015 Juniper Networks Inc 102 SRX240 Services Gateway Hardware Guide ...
Page 122: ...Copyright 2015 Juniper Networks Inc 104 SRX240 Services Gateway Hardware Guide ...
Page 138: ...Copyright 2015 Juniper Networks Inc 120 SRX240 Services Gateway Hardware Guide ...
Page 142: ...Copyright 2015 Juniper Networks Inc 124 SRX240 Services Gateway Hardware Guide ...
Page 148: ...Copyright 2015 Juniper Networks Inc 130 SRX240 Services Gateway Hardware Guide ...
Page 150: ...Copyright 2015 Juniper Networks Inc 132 SRX240 Services Gateway Hardware Guide ...
Page 158: ...Copyright 2015 Juniper Networks Inc 140 SRX240 Services Gateway Hardware Guide ...
Page 186: ...Copyright 2015 Juniper Networks Inc 168 SRX240 Services Gateway Hardware Guide ...
Page 192: ...Copyright 2015 Juniper Networks Inc 174 SRX240 Services Gateway Hardware Guide ...
Page 193: ...PART 7 Index Index on page 177 175 Copyright 2015 Juniper Networks Inc ...
Page 194: ...Copyright 2015 Juniper Networks Inc 176 SRX240 Services Gateway Hardware Guide ...
Page 198: ...Copyright 2015 Juniper Networks Inc 180 SRX240 Services Gateway Hardware Guide ...