Powered by Blogger.

SRX210 basic setup using pppoe

# ACCESS-METHOD:
set access profile ppp authentication-order password

# INTERFACES:
set interfaces fe-0/0/7 unit 0 encapsulation ppp-over-ether

set interfaces pp0 unit 0 ppp-options pap access-profile ppp
set interfaces pp0 unit 0 ppp-options pap local-name "t-online-com/blablablaR@t-online-com.de"
set interfaces pp0 unit 0 ppp-options pap local-password cleartext-password
set interfaces pp0 unit 0 ppp-options pap passive
set interfaces pp0 unit 0 pppoe-options underlying-interface fe-0/0/7.0
set interfaces pp0 unit 0 pppoe-options auto-reconnect 30
set interfaces pp0 unit 0 pppoe-options client
set interfaces pp0 unit 0 family inet mtu 1492
set interfaces pp0 unit 0 family inet negotiate-address


 
# SECURITY:
set security zones security-zone untrust interfaces pp0.0

set security policies from-zone trust to-zone untrust policy allow-all match source-address any
set security policies from-zone trust to-zone untrust policy allow-all match destination-address any
set security policies from-zone trust to-zone untrust policy allow-all match application any
set security policies from-zone trust to-zone untrust policy allow-all then permit

# ROUTING:
set routing-options static route 0.0.0.0/0 next-hop pp0.0

# NAT:
set security nat source rule-set trust-untrust from zone trust
set security nat source rule-set trust-untrust to interface pp0.0
set security nat source rule-set trust-untrust rule Egress-Int match source-address 0.0.0.0/0
set security nat source rule-set trust-untrust rule Egress-Int match destination-address 0.0.0.0/0
set security nat source rule-set trust-untrust rule Egress-Int then source-nat interface
    Blogger Comment
    Facebook Comment