Juniper Junos OS User Manual

}
identification {
match (equal | greater-than | less-than | not-equal);
value identification-value;
}
sequence-number {
match (equal | greater-than | less-than | not-equal);
value sequence-number;
}
type {
match (equal | greater-than | less-than | not-equal);
value type-value;
}
}
ipv4 {
checksum-validate {
match (equal | greater-than | less-than | not-equal);
value checksum-value;
}
destination {
match (equal | greater-than | less-than | not-equal);
value ip-address-or-hostname;
}
identification {
match (equal | greater-than | less-than | not-equal);
value identification-value;
}
ihl {
match (equal | greater-than | less-than | not-equal);
value ihl-value;
}
ip-flags {
(df | no-df);
(mf | no-mf);
(rb | no-rb);
}
protocol {
match (equal | greater-than | less-than | not-equal);
value transport-layer-protocol-id;
}
source {
match (equal | greater-than | less-than | not-equal);
value ip-address-or-hostname;
}
tos {
match (equal | greater-than | less-than | not-equal);
value type-of-service-in-decimal;
}
total-length {
match (equal | greater-than | less-than | not-equal);
value total-length-of-ip-datagram;
}
ttl {
match (equal | greater-than | less-than | not-equal);
value time-to-live;
}
79Copyright © 2016, Juniper Networks, Inc.
Chapter 11: Configuration Statements

Juniper Junos OS Specifications

General

Category	Network Operating System
Operating System	Junos OS
Type	Modular
Supported Hardware	Juniper routers, switches, and security devices
Architecture	Modular
Configuration Model	Hierarchical configuration
Automation Support	Python, Ansible, Puppet, Chef, REST API, NETCONF
High Availability	Graceful Routing Engine Switchover (GRES), Nonstop Active Routing (NSR)
Security Features	Firewall, VPN
Routing Protocols	BGP, OSPF, IS-IS, RIP, MPLS
Switching Protocols	VLAN, STP, RSTP, MSTP, LACP
Management Interfaces	CLI, NETCONF, REST API, SNMP

Summary

Configuring an SRX Series Device for the First Time

Understanding Methods to Manage the Branch SRX Series

Explains various methods for configuring and monitoring SRX Series devices.

Mandatory Settings to Configure the Branch SRX Series

Lists essential configuration settings required for initial device setup.

Connecting the Branch SRX Series Through the Console Port for the First Time

Provides steps to connect the SRX Series device via the console port.

Configuring Internet Access for the Branch SRX Series

Details how to enable Internet access for the SRX Series device.

Configuring Security Zones and Policies for SRX Series

Understanding Security Zones and Policies for SRX Series

Explains how zones and policies control traffic flow in security policies.

Security Policy

Configuring NAT for SRX Series

Understanding NAT for SRX Series

Explains Network Address Translation (NAT) and its types supported on SRX Series.

Example: Configuring Destination NAT for SRX Series

Managing Licenses for SRX Series

Updating Licenses for a Branch SRX Series

Guides on installing and updating licenses for advanced SRX Series features.

Configuring UTM for Branch SRX Series

Understanding Unified Threat Management for Branch SRX Series

Introduces Unified Threat Management (UTM) for network security features.

Example: Configuring Unified Threat Management for a Branch SRX Series

Configuring Intrusion Detection and Prevention for SRX Series

Understanding Intrusion Detection and Prevention for SRX Series

Explains Intrusion Detection and Prevention (IDP) policies for network traffic.

Example: Configuring Intrusion Detection and Prevention for SRX Series

Operational Commands

show security flow session

show security nat destination summary

show security policies

show security zones

show system license (View)

show system services dhcp client