Juniper SRX3600 - Page 164

family inet {
address 192.1.1.1/24;
}
}
}
ge-0/0/1 {
unit 0 {
family inet {
address 5.1.1.1/24;
}
}
}
fxp0 {
unit 0 {
family inet {
address 192.168.10.2/24;
}
}
}
}
routing-options {
static {
route 0.0.0.0/0 next-hop 5.1.1.2;
}
}
security {
zones {
security-zone trust {
interfaces {
ge-0/0/0.0;
}
}
security-zone untrust {
interfaces {
ge-0/0/1.0;
}
}
}
policies {
from-zone trust to-zone untrust {
policy bob {
match {
source-address any;
destination-address any;
158