interfaces { ge-0/0/0 { unit 0 { encapsulation ppp-over-ether; } } ge-0/0/1 { unit 0 { description LAB01VMW001; family ethernet-switching { port-mode trunk; vlan { members [ MGMT DATA VOICE SERVER DMZ ]; } native-vlan-id 100; } } } fe-0/0/2 { unit 0 { description LAB01UCM001; family ethernet-switching { port-mode trunk; vlan { members [ MGMT DATA VOICE DMZ ]; } native-vlan-id 100; } } } fe-0/0/3 { unit 0 { family ethernet-switching { vlan { members MGMT; } } } } pp0 { traceoptions { flag all; } unit 0 { point-to-point; ppp-options { pap { local-name "xxxxxx@btinternet.com"; local-password "xxxxxxxxxxxxxxxxxxxxxxx"; ## SECRET-DATA passive; } } pppoe-options { underlying-interface ge-0/0/0.0; idle-timeout 0; auto-reconnect 10; client; } family inet { negotiate-address; } } } vlan { unit 10 { family inet { address 10.10.10.1/24; } } unit 20 { family inet { address 10.10.20.1/24; } } unit 30 { family inet { address 10.10.30.1/24; } } unit 66 { family inet { address 172.16.0.1/24; } } unit 99 { family inet { address 10.10.99.1/24; } } } } routing-options { static { route 0.0.0.0/0 { next-hop pp0.0; metric 0; } } } protocols { stp; } security { nat { source { rule-set trust-to-untrust { from zone trust; to zone untrust; rule source-nat-rule { match { source-address 0.0.0.0/0; } then { source-nat { interface; } } } } } } screen { ids-option untrust-screen { icmp { ping-death; } ip { source-route-option; tear-drop; } tcp { syn-flood { alarm-threshold 1024; attack-threshold 200; source-threshold 1024; destination-threshold 2048; timeout 20; } land; } } } zones { security-zone trust { host-inbound-traffic { system-services { all; } protocols { all; } } interfaces { vlan.10; vlan.99; vlan.30; vlan.20; } } security-zone untrust { screen untrust-screen; interfaces { ge-0/0/0.0 { host-inbound-traffic { system-services { dhcp; tftp; } } } pp0.0 { host-inbound-traffic { system-services { all; } } } } } } policies { from-zone trust to-zone untrust { policy trust-to-untrust { match { source-address any; destination-address any; application any; } then { permit; } } } } } vlans { DATA { description DATA; vlan-id 10; l3-interface vlan.10; } DMZ { description DMZ; vlan-id 66; l3-interface vlan.66; } HOLE { description Blackhole; vlan-id 100; } MGMT { description MGMT; vlan-id 99; l3-interface vlan.99; } SERVER { description SERVER; vlan-id 30; l3-interface vlan.30; } VOICE { description VOICE; vlan-id 20; l3-interface vlan.20; } }