Advertisement
Guest User

Untitled

a guest
Feb 19th, 2017
126
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.44 KB | None | 0 0
  1.  
  2. ## Last changed: 2017-02-20 04:12:04 GMT
  3. version 12.1X44-D35.5;
  4. system {
  5. host-name Table6-Router;
  6. time-zone GMT;
  7. root-authentication {
  8. encrypted-password "$1$4545di2o$wlF87832iPEqfSLnN0d1F/";
  9. }
  10. name-server {
  11. 208.67.222.222;
  12. 208.67.220.220;
  13. }
  14. name-resolution {
  15. no-resolve-on-input;
  16. }
  17. services {
  18. ssh;
  19. telnet;
  20. web-management {
  21. http {
  22. interface [ ge-0/0/1.0 ge-0/0/1.16 ge-0/0/1.8 ge-0/0/1.30 ge-0/0/1.40 ge-0/0/1.50 ge-0/0/1.60 ];
  23. }
  24. https {
  25. system-generated-certificate;
  26. interface [ ge-0/0/1.0 ge-0/0/1.16 ge-0/0/1.8 ge-0/0/1.30 ge-0/0/1.40 ge-0/0/1.50 ge-0/0/1.60 ];
  27. }
  28. session {
  29. idle-timeout 60;
  30. }
  31. }
  32. dhcp {
  33. propagate-settings ge-0/0/0;
  34. }
  35. }
  36. syslog {
  37. archive size 100k files 3;
  38. user * {
  39. any emergency;
  40. }
  41. file messages {
  42. any critical;
  43. authorization info;
  44. }
  45. file interactive-commands {
  46. interactive-commands error;
  47. }
  48. }
  49. max-configurations-on-flash 5;
  50. max-configuration-rollbacks 5;
  51. license {
  52. autoupdate {
  53. url https://ae1.juniper.net/junos/key_retrieval;
  54. }
  55. }
  56. ntp {
  57. server us.ntp.pool.org;
  58. }
  59. }
  60. interfaces {
  61. ge-0/0/0 {
  62. unit 0 {
  63. family inet {
  64. dhcp;
  65. }
  66. }
  67. }
  68. ge-0/0/1 {
  69. vlan-tagging;
  70. unit 0 {
  71. vlan-id 1;
  72. family inet {
  73. address 192.168.1.1/24;
  74. }
  75. }
  76. unit 8 {
  77. vlan-id 89;
  78. family inet {
  79. address 192.168.8.1/24;
  80. }
  81. }
  82. unit 16 {
  83. vlan-id 16;
  84. family inet {
  85. address 192.168.16.1/24;
  86. }
  87. }
  88. unit 30 {
  89. vlan-id 30;
  90. family inet {
  91. address 192.168.30.1/24;
  92. }
  93. }
  94. unit 40 {
  95. vlan-id 40;
  96. family inet {
  97. address 192.168.40.1/24;
  98. }
  99. }
  100. unit 50 {
  101. vlan-id 50;
  102. family inet {
  103. address 192.168.50.1/24;
  104. }
  105. }
  106. unit 60 {
  107. vlan-id 60;
  108. family inet {
  109. address 192.168.60.1/24;
  110. }
  111. }
  112. }
  113. }
  114. protocols {
  115. stp;
  116. }
  117. security {
  118. nat {
  119. source {
  120. rule-set nsw_srcnat {
  121. from zone Internal;
  122. to zone Internet;
  123. rule nsw-src-interface {
  124. match {
  125. source-address 0.0.0.0/0;
  126. destination-address 0.0.0.0/0;
  127. }
  128. then {
  129. source-nat {
  130. interface;
  131. }
  132. }
  133. }
  134. }
  135. }
  136. }
  137. policies {
  138. from-zone Internal to-zone Internet {
  139. policy All_Internal_Internet {
  140. match {
  141. source-address any;
  142. destination-address any;
  143. application any;
  144. }
  145. then {
  146. permit;
  147. }
  148. }
  149. policy AllowAll_Internet_Internal {
  150. match {
  151. source-address any;
  152. destination-address any;
  153. application any;
  154. }
  155. then {
  156. permit;
  157. }
  158. }
  159. }
  160. from-zone Internet to-zone Internal {
  161. policy AllowAll_Internet_Internal {
  162. match {
  163. source-address any;
  164. destination-address any;
  165. application any;
  166. }
  167. then {
  168. permit;
  169. }
  170. }
  171. }
  172. from-zone Internal to-zone Internal {
  173. policy InternaltoInternal {
  174. match {
  175. source-address any;
  176. destination-address any;
  177. application any;
  178. }
  179. then {
  180. permit;
  181. }
  182. }
  183. }
  184. }
  185. zones {
  186. security-zone Internal {
  187. interfaces {
  188. ge-0/0/1.0 {
  189. host-inbound-traffic {
  190. system-services {
  191. ping;
  192. http;
  193. https;
  194. ssh;
  195. telnet;
  196. }
  197. }
  198. }
  199. ge-0/0/1.16 {
  200. host-inbound-traffic {
  201. system-services {
  202. ping;
  203. http;
  204. https;
  205. ssh;
  206. telnet;
  207. }
  208. }
  209. }
  210. ge-0/0/1.8 {
  211. host-inbound-traffic {
  212. system-services {
  213. ping;
  214. http;
  215. https;
  216. ssh;
  217. telnet;
  218. }
  219. }
  220. }
  221. ge-0/0/1.30 {
  222. host-inbound-traffic {
  223. system-services {
  224. ping;
  225. http;
  226. https;
  227. ssh;
  228. telnet;
  229. }
  230. }
  231. }
  232. ge-0/0/1.40 {
  233. host-inbound-traffic {
  234. system-services {
  235. ping;
  236. http;
  237. https;
  238. ssh;
  239. telnet;
  240. }
  241. }
  242. }
  243. ge-0/0/1.50 {
  244. host-inbound-traffic {
  245. system-services {
  246. ping;
  247. http;
  248. https;
  249. ssh;
  250. telnet;
  251. }
  252. }
  253. }
  254. ge-0/0/1.60 {
  255. host-inbound-traffic {
  256. system-services {
  257. ping;
  258. http;
  259. https;
  260. ssh;
  261. telnet;
  262. }
  263. }
  264. }
  265. }
  266. }
  267. security-zone Internet {
  268. interfaces {
  269. ge-0/0/0.0 {
  270. host-inbound-traffic {
  271. system-services {
  272. ping;
  273. dhcp;
  274. }
  275. }
  276. }
  277. }
  278. }
  279. }
  280. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement