VPN Mode Configuration Commands
256
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
SSL VPN Policy Commands
vpn sslvpn policy add
This command configures a new SSL VPN policy. After you have issued the vpn sslvpn
policy add command, you enter the vpn-config [sslvpn-policy-settings] mode, and then
you can configure one keyword and associated parameter or associated keyword at a time in
the order that you prefer.
Step 1 Format vpn sslvpn policy add
Mode vpn
Step 2 Format policy_name <policy name>
policy_type {Global | Group {policy_owner <group name>} |
User {policy_owner <user name>}}
destination_object_type {NetworkResource | IPAddress |
IPNetwork | All}
In addition to a policy name, policy type, and destination object type, configure the
following for a network resource:
ip_version {IPv4 | IPv6}
resource_name <resource name>
policy_permission {Permit | Deny}
In addition to a policy name, policy type, and destination object type, configure the
following for an IP address:
ip_version {IPv4 {policy_address <ipaddress>} | IPv6
{policy_address6 <ipv6-address>}}
start_port <port number>
end_port <port number>
service_type {VPNTunnel | PortForwarding | All}
policy_permission {Permit | Deny}
In addition to a policy name, policy type, and destination object type, configure the
following for an IP network:
ip_version {IPv4 {policy_address <ipadd
ress>}
{policy_mask_length <subnet mask>} | IPv6 {policy_address6
<ipv6-address>} {policy_ipv6_prefix_length <prefix length>}}
start_port <port number>
end_port <port number>
service_type {VPNTunnel | PortForwarding | All}
policy_permission {Permit | Deny}