Juniper SRX3600 - Page 23

}
}
}
ge-0/0/1 {
unit 0 {
family inet {
address 5.1.1.1/24;
}
}
}
fxp0 {
unit 0 {
family inet {
address 192.168.10.2/24;
}
}
}
}
routing-options {
static {
route 0.0.0.0/0 next-hop 5.1.1.2;
}
}
security {
zones {
security-zone trust {
interfaces {
ge-0/0/0.0;
}
}
security-zone untrust {
interfaces {
ge-0/0/1.0;
}
}
}
policies {
from-zone trust to-zone untrust {
policy bob {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
}
}
2. Commit the configuration to activate it on the services gateway.
[edit]
admin@# commit
23Copyright © 2011, Juniper Networks, Inc.
Commit the Configuration