-
Notifications
You must be signed in to change notification settings - Fork 425
/
Copy pathjuniper.policy.html
88 lines (79 loc) · 8.21 KB
/
juniper.policy.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><title>第 17 章 Policy</title><link rel="stylesheet" type="text/css" href="../docbook.css" /><meta name="generator" content="DocBook XSL Stylesheets Vsnapshot" /><meta name="keywords" content="Cisco, H3C, Juniper, F5 BIG-IP, Array, Dell, IBM, HP, , " /><link rel="home" href="../index.html" title="Netkiller Network 手札" /><link rel="up" href="index.html" title="部分 III. Juniper" /><link rel="prev" href="juniper.router.html" title="第 16 章 Router" /><link rel="next" href="acl.other.html" title="17.2. OpenSSH" /></head><body><a xmlns="" href="//www.netkiller.cn/">Home</a> |
<a xmlns="" href="//netkiller.github.io/">简体中文</a> |
<a xmlns="" href="http://netkiller.sourceforge.net/">繁体中文</a> |
<a xmlns="" href="/journal/index.html">杂文</a> |
<a xmlns="" href="https://zhuanlan.zhihu.com/netkiller">知乎专栏</a> |
<a xmlns="" href="https://edu.51cto.com/lecturer/1703915.html">51CTO学院</a> |
<a xmlns="" href="https://edu.csdn.net/lecturer/6423">CSDN程序员研修院</a> |
<a xmlns="" href="https://github.com/netkiller">Github</a> |
<a xmlns="" href="http://my.oschina.net/neochen/">OSChina 博客</a> |
<a xmlns="" href="https://cloud.tencent.com/developer/column/2078">腾讯云社区</a> |
<a xmlns="" href="https://yq.aliyun.com/u/netkiller/">阿里云栖社区</a> |
<a xmlns="" href="https://www.facebook.com/bg7nyt">Facebook</a> |
<a xmlns="" href="http://cn.linkedin.com/in/netkiller/">Linkedin</a> |
<a xmlns="" href="https://www.youtube.com/user/bg7nyt/videos">Youtube</a> |
<a xmlns="" href="//www.netkiller.cn/home/donations.html">打赏(Donations)</a> |
<a xmlns="" href="//www.netkiller.cn/home/about.html">About</a><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">第 17 章 Policy</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="juniper.router.html">上一页</a> </td><th width="60%" align="center">部分 III. Juniper</th><td width="20%" align="right"> <a accesskey="n" href="acl.other.html">下一页</a></td></tr></table><hr /></div><table xmlns=""><tr><td><iframe src="//ghbtns.com/github-btn.html?user=netkiller&repo=netkiller.github.io&type=watch&count=true&size=large" height="30" width="170" frameborder="0" scrolling="0" style="width:170px; height: 30px;" allowTransparency="true"></iframe></td><td><iframe src="//ghbtns.com/github-btn.html?user=netkiller&repo=netkiller.github.io&type=fork&count=true&size=large" height="30" width="170" frameborder="0" scrolling="0" style="width:170px; height: 30px;" allowTransparency="true"></iframe></td><td><iframe src="//ghbtns.com/github-btn.html?user=netkiller&type=follow&count=true&size=large" height="30" width="240" frameborder="0" scrolling="0" style="width:240px; height: 30px;" allowTransparency="true"></iframe></td><td></td><td><a href="https://zhuanlan.zhihu.com/netkiller"><img src="/images/logo/zhihu-card-default.svg" height="25" /></a></td><td valign="middle"><a href="https://zhuanlan.zhihu.com/netkiller">知乎专栏</a> ｜ <a href="https://www.zhihu.com/club/1241768772601950208">多维度架构</a></td><td></td><td></td><td></td><td></td></tr></table><div class="chapter"><div class="titlepage"><div><div><h2 class="title"><a id="juniper.policy"></a>第 17 章 Policy</h2></div></div></div><div class="toc"><p><strong>目录</strong></p><dl class="toc"><dt><span class="section"><a href="juniper.policy.html#idm343282192800">17.1. 策略管理</a></span></dt><dt><span class="section"><a href="acl.other.html">17.2. OpenSSH</a></span></dt><dt><span class="section"><a href="ch17s03.html">17.3. HTTP</a></span></dt><dt><span class="section"><a href="ch17s04.html">17.4. RemoteDesktop</a></span></dt><dt><span class="section"><a href="ch17s05.html">17.5. PPTP</a></span></dt><dt><span class="section"><a href="ch17s06.html">17.6. DMZ to Untrust (nat src)</a></span></dt></dl></div><div class="section"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a id="idm343282192800"></a>17.1. 策略管理</h2></div></div></div><p>show policy</p><pre class="screen">
firewall-> get policy
Total regular policies 24, Default deny.
ID From To Src-address Dst-address Service Action State ASTLCB
76 Untrust Trust Any VIP(61.144.~ OpenSSH Permit enabled -----X
77 Untrust Trust Any VIP(61.144.~ CTBS Permit enabled -----X
78 Untrust Trust Any VIP(61.144.~ RemoteDesktop Permit enabled -----X
firewall-> get policy
Total regular policies 23, Default deny.
76 Untrust Trust Any VIP(61.144.~ OpenSSH Permit enabled -----X
78 Untrust Trust Any VIP(61.144.~ RemoteDesktop Permit enabled -----X
</pre><p>Removing policy</p><pre class="screen">
firewall-> get policy
Total regular policies 24, Default deny.
ID From To Src-address Dst-address Service Action State ASTLCB
76 Untrust Trust Any VIP(61.144.~ OpenSSH Permit enabled -----X
77 Untrust Trust Any VIP(61.144.~ CTBS Permit enabled -----X
78 Untrust Trust Any VIP(61.144.~ RemoteDesktop Permit enabled -----X
firewall-> unset policy 77
firewall-> get policy
Total regular policies 23, Default deny.
76 Untrust Trust Any VIP(61.144.~ OpenSSH Permit enabled -----X
78 Untrust Trust Any VIP(61.144.~ RemoteDesktop Permit enabled -----X
</pre><p></p><p>policy id = 79</p><pre class="screen">
set policy id 79
set service "HTTPS"
</pre><p></p><pre class="screen">
unset service "SSH"
exit
</pre><p></p></div></div><div xmlns="" id="SOHUCS"></div><script xmlns="" charset="utf-8" type="text/javascript" src="https://cy-cdn.kuaizhan.com/upload/changyan.js"></script><script xmlns="" type="text/javascript">
window.changyan.api.config({
appid: 'cyvwjQUG3',
conf: 'prod_ef966242df3d8b5acb1e0ee9fc01cafe'
});
</script><script xmlns="" type="text/javascript" id="clustrmaps" src="//cdn.clustrmaps.com/map_v2.js?u=r5HG&d=9mi5r_kkDC8uxG8HuY3p4-2qgeeVypAK9vMD-2P6BYM"></script><div class="navfooter"><hr /><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="juniper.router.html">上一页</a> </td><td width="20%" align="center"><a accesskey="u" href="index.html">上一级</a></td><td width="40%" align="right"> <a accesskey="n" href="acl.other.html">下一页</a></td></tr><tr><td width="40%" align="left" valign="top">第 16 章 Router </td><td width="20%" align="center"><a accesskey="h" href="../index.html">起始页</a></td><td width="40%" align="right" valign="top"> 17.2. OpenSSH</td></tr></table></div><script xmlns="">
(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
})(window,document,'script','//www.google-analytics.com/analytics.js','ga');
ga('create', 'UA-11694057-1', 'auto');
ga('send', 'pageview');
</script><script xmlns="" async="async">
var _hmt = _hmt || [];
(function() {
var hm = document.createElement("script");
hm.src = "https://hm.baidu.com/hm.js?93967759a51cda79e49bf4e34d0b0f2c";
var s = document.getElementsByTagName("script")[0];
s.parentNode.insertBefore(hm, s);
})();
</script><script xmlns="" async="async">
(function(){
var bp = document.createElement('script');
var curProtocol = window.location.protocol.split(':')[0];
if (curProtocol === 'https') {
bp.src = 'https://zz.bdstatic.com/linksubmit/push.js';
}
else {
bp.src = 'http://push.zhanzhang.baidu.com/push.js';
}
var s = document.getElementsByTagName("script")[0];
s.parentNode.insertBefore(bp, s);
})();
</script></body></html>