Powered by Blogger.

How to define a port range on a Juniper SRX

To create a range of ports within the SRX the following command is used. This example creates an application object named UDP-PORT-RANGE with a UDP port range of 5000-6999.


set applications application UDP-PORT-RANGE protocol udp destination-port 5000-6999

Once created you can then add this to a group. This group can then be added to the necessary policy. Below shows an example:



set groups GRP-PORTS
set applications application-set GRP-PORTS application RDP-3389
set applications application-set GRP-PORTS application UDP-PORT-RANGE

set security policies from-zone untrust to-zone trust policy example-policy match application GRP-PORTS
    Blogger Comment
    Facebook Comment