0% found this document useful (0 votes)
8 views2 pages

vSRX1 Configuration Overview

The document provides the configuration settings for a vSRX1 device, including system version, host name, user authentication, and various services like SSH and web management. It outlines security policies and zones, specifying trust and untrust zones along with their respective interfaces and IP addresses. Additionally, it details syslog settings and security screen options to mitigate various types of network attacks.

Uploaded by

rashmi m
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
8 views2 pages

vSRX1 Configuration Overview

The document provides the configuration settings for a vSRX1 device, including system version, host name, user authentication, and various services like SSH and web management. It outlines security policies and zones, specifying trust and untrust zones along with their respective interfaces and IP addresses. Additionally, it details syslog settings and security screen options to mitigate various types of network attacks.

Uploaded by

rashmi m
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd

**** vSRX 1 ****

jcluser@vSRX1> show configuration | display set


set version 21.1R3.11
set system host-name vSRX1
set system root-authentication encrypted-password
"$6$dSTbXxFy$KeCmFiHX6XSMkn3DX9GdrZY1Fb.iDnrGRpdJA9XWMvtaOKfvFe/n8yU2AMp8HJi5aj7ZVW
azmdt.bkc4rtTss1"
set system scripts language python
set system login user jcluser uid 2000
set system login user jcluser class super-user
set system login user jcluser authentication encrypted-password
"$6$iKgVA34A$AR62xbpriXxVbDQuT6DMOph1r069/ytRiJKThwdXK/Ol2U6k3knRxtPonzIHGmSzQUwdDg
mbzT7JM9Rnx7QRF."
set system services ssh root-login allow
set system services netconf ssh
set system services rest http port 3000
set system services web-management http interface fxp0.0
set system services web-management https system-generated-certificate
set system services web-management https interface fxp0.0
set system syslog user * any emergency
set system syslog file messages any any
set system syslog file messages authorization info
set system syslog file interactive-commands interactive-commands any
set system license autoupdate url [Link]
set security screen ids-option untrust-screen icmp ping-death
set security screen ids-option untrust-screen ip source-route-option
set security screen ids-option untrust-screen ip tear-drop
set security screen ids-option untrust-screen tcp syn-flood alarm-threshold 1024
set security screen ids-option untrust-screen tcp syn-flood attack-threshold 200
set security screen ids-option untrust-screen tcp syn-flood source-threshold 1024
set security screen ids-option untrust-screen tcp syn-flood destination-threshold
2048
set security screen ids-option untrust-screen tcp syn-flood queue-size 2000
set security screen ids-option untrust-screen tcp syn-flood timeout 20
set security screen ids-option untrust-screen tcp land
set security policies from-zone trust to-zone trust policy default-permit match
source-address any
set security policies from-zone trust to-zone trust policy default-permit match
destination-address any
set security policies from-zone trust to-zone trust policy default-permit match
application any
set security policies from-zone trust to-zone trust policy default-permit then
permit
set security policies from-zone trust to-zone untrust policy default-permit match
source-address any
set security policies from-zone trust to-zone untrust policy default-permit match
destination-address any
set security policies from-zone trust to-zone untrust policy default-permit match
application any
set security policies from-zone trust to-zone untrust policy default-permit then
permit
set security zones security-zone trust host-inbound-traffic system-services any-
service
set security zones security-zone trust interfaces ge-0/0/0.0
set security zones security-zone trust interfaces ge-0/0/1.0
set security zones security-zone untrust interfaces ge-0/0/2.0
set interfaces ge-0/0/0 unit 0 family inet address [Link]/24
set interfaces ge-0/0/1 unit 0 family inet address [Link]/24
set interfaces ge-0/0/2 unit 0 family inet address [Link]/24
set interfaces fxp0 unit 0 family inet dhcp

You might also like