VPN Mode Configuration Commands
260
ProSafe Gigabit Quad WAN SSL VPN Firewall SRX5308
Command example:
SRX5308>
vpn sslvpn policy add
vpn-config[sslvpn-policy-settings]>
policy_name RoadWarriorPolicy
ip_version IPv4 or IPv6 Specifies the IP version that applies to the
policy:
• IPv4. The policy is for an IPv4 network
resource, IPv4 address, IPv4 network, or for
all IPv4 addresses.
For an IP address or IP network, you need to
issue the policy_address keyword and
specify an IPv4 address. For a network
address, you also need to issue the
policy_mask_length keyword and specify
a subnet mask.
• IPv6. The policy is for an IPv6 network
resource, IPv6 address, IPv6 network, or for
all IPv6 addresses.
For an IP address or IP network, you need to
issue the policy_address6 keyword and
specify an IPv6 address. For a network
address, you also need to issue the
policy_ipv6_prefix_length keyword
and specify a prefix length.
policy_address ipaddress The IPv4 address, if the policy is for an IPv4
address or IPv4 network.
policy_mask_length subnet mask The subnet mask, if the policy is for an IPv4
network.
policy_address6 ipv6-address The IPv6 address, if the policy is for an IPv6
address or IPv6 network.
policy_ipv6_prefix_length
prefix length The prefix length, if the policy is for an IPv6
network.
start_port port number The start port number for a policy port range.
(This does not apply if the policy is for a
network resource.)
end_port port number The end port number for a policy port range.
(This does not apply if the policy is for a
network resource.)
service_type VPNTunnel,
PortForwarding, or All
Specifies the service type for the policy:
• VPNTunnel. The policy is applied only to a
VPN tunnel.
• PortForwarding. The policy is applied only to
port forwarding.
• All. The policy is applied both to a VPN
tunnel and to port forwarding.
Keyword Associated Keyword to
Select or Parameter to Type
Description