Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ## Last changed: 2017-02-20 04:12:04 GMT
- version 12.1X44-D35.5;
- system {
- host-name Table6-Router;
- time-zone GMT;
- root-authentication {
- encrypted-password "$1$4545di2o$wlF87832iPEqfSLnN0d1F/";
- }
- name-server {
- 208.67.222.222;
- 208.67.220.220;
- }
- name-resolution {
- no-resolve-on-input;
- }
- services {
- ssh;
- telnet;
- web-management {
- http {
- interface [ ge-0/0/1.0 ge-0/0/1.16 ge-0/0/1.8 ge-0/0/1.30 ge-0/0/1.40 ge-0/0/1.50 ge-0/0/1.60 ];
- }
- https {
- system-generated-certificate;
- interface [ ge-0/0/1.0 ge-0/0/1.16 ge-0/0/1.8 ge-0/0/1.30 ge-0/0/1.40 ge-0/0/1.50 ge-0/0/1.60 ];
- }
- session {
- idle-timeout 60;
- }
- }
- dhcp {
- propagate-settings ge-0/0/0;
- }
- }
- syslog {
- archive size 100k files 3;
- user * {
- any emergency;
- }
- file messages {
- any critical;
- authorization info;
- }
- file interactive-commands {
- interactive-commands error;
- }
- }
- max-configurations-on-flash 5;
- max-configuration-rollbacks 5;
- license {
- autoupdate {
- url https://ae1.juniper.net/junos/key_retrieval;
- }
- }
- ntp {
- server us.ntp.pool.org;
- }
- }
- interfaces {
- ge-0/0/0 {
- unit 0 {
- family inet {
- dhcp;
- }
- }
- }
- ge-0/0/1 {
- vlan-tagging;
- unit 0 {
- vlan-id 1;
- family inet {
- address 192.168.1.1/24;
- }
- }
- unit 8 {
- vlan-id 89;
- family inet {
- address 192.168.8.1/24;
- }
- }
- unit 16 {
- vlan-id 16;
- family inet {
- address 192.168.16.1/24;
- }
- }
- unit 30 {
- vlan-id 30;
- family inet {
- address 192.168.30.1/24;
- }
- }
- unit 40 {
- vlan-id 40;
- family inet {
- address 192.168.40.1/24;
- }
- }
- unit 50 {
- vlan-id 50;
- family inet {
- address 192.168.50.1/24;
- }
- }
- unit 60 {
- vlan-id 60;
- family inet {
- address 192.168.60.1/24;
- }
- }
- }
- }
- protocols {
- stp;
- }
- security {
- nat {
- source {
- rule-set nsw_srcnat {
- from zone Internal;
- to zone Internet;
- rule nsw-src-interface {
- match {
- source-address 0.0.0.0/0;
- destination-address 0.0.0.0/0;
- }
- then {
- source-nat {
- interface;
- }
- }
- }
- }
- }
- }
- policies {
- from-zone Internal to-zone Internet {
- policy All_Internal_Internet {
- match {
- source-address any;
- destination-address any;
- application any;
- }
- then {
- permit;
- }
- }
- policy AllowAll_Internet_Internal {
- match {
- source-address any;
- destination-address any;
- application any;
- }
- then {
- permit;
- }
- }
- }
- from-zone Internet to-zone Internal {
- policy AllowAll_Internet_Internal {
- match {
- source-address any;
- destination-address any;
- application any;
- }
- then {
- permit;
- }
- }
- }
- from-zone Internal to-zone Internal {
- policy InternaltoInternal {
- match {
- source-address any;
- destination-address any;
- application any;
- }
- then {
- permit;
- }
- }
- }
- }
- zones {
- security-zone Internal {
- interfaces {
- ge-0/0/1.0 {
- host-inbound-traffic {
- system-services {
- ping;
- http;
- https;
- ssh;
- telnet;
- }
- }
- }
- ge-0/0/1.16 {
- host-inbound-traffic {
- system-services {
- ping;
- http;
- https;
- ssh;
- telnet;
- }
- }
- }
- ge-0/0/1.8 {
- host-inbound-traffic {
- system-services {
- ping;
- http;
- https;
- ssh;
- telnet;
- }
- }
- }
- ge-0/0/1.30 {
- host-inbound-traffic {
- system-services {
- ping;
- http;
- https;
- ssh;
- telnet;
- }
- }
- }
- ge-0/0/1.40 {
- host-inbound-traffic {
- system-services {
- ping;
- http;
- https;
- ssh;
- telnet;
- }
- }
- }
- ge-0/0/1.50 {
- host-inbound-traffic {
- system-services {
- ping;
- http;
- https;
- ssh;
- telnet;
- }
- }
- }
- ge-0/0/1.60 {
- host-inbound-traffic {
- system-services {
- ping;
- http;
- https;
- ssh;
- telnet;
- }
- }
- }
- }
- }
- security-zone Internet {
- interfaces {
- ge-0/0/0.0 {
- host-inbound-traffic {
- system-services {
- ping;
- dhcp;
- }
- }
- }
- }
- }
- }
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement