Section $3\mathrm{.}3$: Security Interface Configuration

Junos OS includes functionalities of software security at the router interface level. Students will

configure security router interfaces on all routers in this section.

$$ Use the command show security policies to view existing policies. Is there anything?

Page $|11$

NE$-$Labs

EEET$-2290/2291$

Page $|12$ NE$-$Labs

$$ Use the command show security zones to view existing zones. Is there any zone?

$$ Create a policy to allow a trust zone to communicate with another trust zone: permit any

traffic from any source$-$address, to any destination$-$address and for any application. A

sample configuration is shown below.

security $\{$

policies $\{$

from$-$zone trust to$-$zone trust $\{$

policy allow$-$all $\{$

match $\{$

source$-$address any;

destination$-$address any;

application any;

$\}$

then $\{$

permit