## Last changed: 2022-12-30 19:49:59 EST version 22.3R1.11; groups { noded; node0 { system { backup-router 192.168.1.1 destination [ 128.0.0.0/1 192.100.0.0/16 ]; } } } system { host-name gw3; root-authentication { Xxxxx } login { user xxxxxxx { uid 2002; class super-user; authentication { xxxxxxxx } } } services { ssh { root-login allow; } netconf { ssh; } dhcp-local-server { group jdhcp-group { interface fxp0.0; interface irb.0; } } web-management { http { interface [ vlan.0 ge-0/0/0.0 ge-0/0/7.0 fxp0.0 ]; } https { system-generated-certificate; } session { idle-timeout 1440; session-limit 7; } } } backup-router 192.168.1.1 destination [ 0.0.0.0/1 128.0.0.0/1 ]; time-zone America/New_York; name-server { 69.13.54.137; 69.13.54.138; 8.8.8.8; 8.8.4.4; } syslog { archive size 100k files 3; user * { any emergency; } file interactive-commands { interactive-commands any; } file messages { any notice; authorization info; } } max-configurations-on-flash 5; max-configuration-rollbacks 5; license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; } } ntp { server 132.163.97.5 prefer; server 128.138.141.177 prefer; } phone-home { server https://redirect.juniper.net; rfc-compliant; } } security { screen { ids-option untrust-screen { icmp { ping-death; } ip { source-route-option; tear-drop; } tcp { syn-flood { alarm-threshold 1024; attack-threshold 200; source-threshold 1024; destination-threshold 2048; timeout 20; } land; } } } policies { from-zone trust to-zone trust { policy trust-to-trust { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone trust to-zone untrust { policy our-internet-policy { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone untrust to-zone trust { policy our-deny-policy { match { source-address any; destination-address any; application any; } then { deny; } } } pre-id-default-policy { then { log { session-close; } } } } zones { security-zone trust { host-inbound-traffic { system-services { all; ssh; } protocols { all; } } interfaces { irb.0; ge-0/0/7.0; } } security-zone untrust { screen untrust-screen; host-inbound-traffic { system-services { ping; } } interfaces { ge-0/0/0.0 { host-inbound-traffic { system-services { dhcp; tftp; https; ping; } } } ge-0/0/15.0 { host-inbound-traffic { system-services { dhcp; tftp; } } } dl0.0 { host-inbound-traffic { system-services { tftp; } } } } } } } interfaces { ge-0/0/0 { unit 0 { description Internet; family inet { address xxx.182.158.254/24 { web-authentication { http; https; redirect-to-https; } } } } } ge-0/0/1 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/2 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/3 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/4 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/5 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/6 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/7 { unit 0 { family inet { address 10.10.20.254/24; } } } ge-0/0/8 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/9 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/10 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/11 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/12 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/13 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/14 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/15 { unit 0 { family inet { dhcp { vendor-id Juniper-srx345; } } } } cl-1/0/0 { dialer-options { pool 1 priority 100; } } dl0 { unit 0 { family inet { negotiate-address; } family inet6 { negotiate-address; } dialer-options { pool 1; dial-string 1234; always-on; } } } fxp0 { unit 0 { family inet { address 192.168.1.1/24 { web-authentication { http; https; redirect-to-https; } } } } } irb { unit 0 { family inet { address 192.168.2.1/24; } } } lo0 { unit 0 { family inet { address 192.168.1.2/24; } } } } firewall { family inet { filter Trusted-Mgm { term Management-IP { from { source-address { 197.153.56.212/32; } } } } } } access { profile local { client echouafnist { firewall-user { password "$9$U4D.5n6A01hCtvWXxdV.Pf5n/"; ## SECRET-DATA } } address-assignment { pool junosDHCPPool1; } } address-assignment { pool junosDHCPPool1 { family inet { network 192.168.1.0/24; range junosRange { low 192.168.1.2; high 192.168.1.254; } dhcp-attributes { router { 192.168.1.1; } propagate-settings ge-0/0/0.0; } } } pool junosDHCPPool2 { family inet { network 192.168.2.0/24; range junosRange { low 192.168.2.2; high 192.168.2.254; } dhcp-attributes { router { 192.168.2.1; } propagate-settings ge-0/0/0.0; } } } } firewall-authentication { web-authentication { default-profile local; banner { success "Welcome BB"; } } } } vlans { vlan-trust { vlan-id 3; l3-interface irb.0; } } protocols { l2-learning { global-mode switching; } rstp { interface all; } } routing-options { static { route 0.0.0.0/0 next-hop xxx.182.144.1; } }