Juniper Netscreen Quick Reference

Policies

Creating a basic policy

Syntax

fw-> set pol from <Source Zone> to <Destination Zone> <Source host> <Destination host> <Service> <Action>

Example

The following command allows anyone from the Trust zone to create HTTP sessions to any host located on the Untrust zone.

fw-> set pol from Trust to Untrust Any Any HTTP Permit
policy id = 248

Adding a service to an existing policy

Syntax

fw-> set pol id <ID>
fw(policy:<ID>)-> set service <SERVICE>
fw(policy:<ID>)-> exit
fw-> 

Example

The following commands allows the FTP protocol in addition to the HTTP protocol that we already allowed in the previous policy.

fw-> set pol id 248
fw(policy:248)-> set service FTP
fw(policy:248)-> exit
fw-> 

Listing policies from a zone to another

get pol from "zone_name" to "zone_name"

You could also use the always-handy

get pol | inc "pattern"

So you can match on the source or destination zone.

Vlans

halloo