Juniper NFX250 - Page 202

permit-all;
}
[edit]
root@ipsec-nm# show security zones
security-zone {
trust {
host-inbound-traffic {
system-services all;
protocols all;
}
interfaces ge-0/0/0.0;
}
untrust {
host-inbound-traffic {
system-services all;
protocols all;
}
interfaces ge-0/0/1.0;
}
[edit]
root@ipsec-nm# show interfaces
ge-0/0/0 unit 0 {
vlan-id 100;
family inet address 3.3.3.2/24;
family inet6 address 3000::1/64;
vlan-tagging;
}
ge-0/0/1 unit 0 {
vlan-id 4088;
family inet address 51.0.1.1/24;
family inet6 address 5000::1/64;
vlan-tagging;
}
[edit]
root@ipsec-nm# show routing-options
static route 2.2.2.0/24 {
next-hop 21.1.1.2;
}
If you are done configuring the device, enter commit from configuration mode.
Verification
Confirm that the configuration is working properly.
Verifying the Configuration
Purpose Verify that the IKE, IPSec SA, and security zones configuration is correct.
Action From operational mode, enter the show security ike, show security ipsec, show security
flow, show security policies, show security zones, show interfaces, and show routing-options
commands.
Copyright © 2017, Juniper Networks, Inc.184
JDM User Guide for NFX250 Network Services Platform