show configuration ## Last commit: 2019-10-24 19:39:06 GMT-5 by etoghi version 15.1X49-D70.3; system { host-name HOME-FIREWALL; domain-name 8.8.8.8; time-zone GMT-5; root-authentication { encrypted-password "HIDDEN"; ## SECRET-DATA } name-server { 207.164.234.193; 198.235.214.4; } login { user etoghi { uid 2000; class super-user; authentication { encrypted-password "HIDDEN"; ## SECRET-DATA } } } services { ssh; telnet; xnm-clear-text; netconf { ssh; } dhcp-local-server { group int { interface irb.8; interface irb.9; } } web-management { http { interface [ vlan.8 irb.8 ]; } https { system-generated-certificate; interface [ irb.8 vlan.0 vlan.8 ]; } } } syslog { archive size 100k files 3; user * { any emergency; } file messages { any notice; authorization info; } file interactive-commands { interactive-commands any; } } max-configurations-on-flash 5; max-configuration-rollbacks 5; license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; } } } security { flow { tcp-mss { all-tcp { mss 1448; } } } screen { ids-option untrust-screen { icmp { ping-death; } ip { source-route-option; tear-drop; } tcp { syn-flood { alarm-threshold 1024; attack-threshold 200; source-threshold 1024; destination-threshold 2048; timeout 20; } land; } } } nat { ---(more 27%)--- source { rule-set trust-to-untrust { from zone trust; to zone untrust; rule source-nat-rule { match { source-address 0.0.0.0/0; } then { source-nat { interface; } } } } } } policies { from-zone trust to-zone trust { policy trust-to-trust { match { source-address any; destination-address any; application any; } then { permit; } } } from-zone trust to-zone untrust { policy trust-to-untrust { match { source-address any; destination-address any; application any; } then { permit; } } } } zones { security-zone trust { host-inbound-traffic { system-services { all; } protocols { all; } } interfaces { irb.0; irb.8 { host-inbound-traffic { system-services { dhcp; all; } protocols { all; } } } irb.9 { host-inbound-traffic { system-services { dhcp; } protocols { all; } } } } } security-zone untrust { screen untrust-screen; interfaces { ge-0/0/0.0 { host-inbound-traffic { system-services { dhcp; tftp; } } } pp0.0; ge-0/0/5.0; ge-0/0/7.0; } } } } interfaces { ge-0/0/0 { unit 0 { family inet; } } ge-0/0/1 { unit 0 { family ethernet-switching { interface-mode access; vlan { members test; } } } } ge-0/0/2 { speed 1g; unit 0 { family ethernet-switching { vlan { members test2; } } } } ge-0/0/3 { gigether-options { auto-negotiation; } unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/4 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/5 { vlan-tagging; unit 0 { encapsulation ppp-over-ether; vlan-id 35; } } ge-0/0/6 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } ge-0/0/7 { vlan-tagging; unit 0 { encapsulation ppp-over-ether; vlan-id 35; } } irb { unit 0; unit 8 { family inet { address 192.168.8.1/24; } } unit 9 { family inet { address 192.168.9.1/24; } } } pp0 { unit 0 { ppp-options { pap { access-profile ppp; local-name ABCDEFG; no-rfc2486; local-password "HIDDEN"; ## SECRET-DATA passive; } } pppoe-options { underlying-interface ge-0/0/5.0; auto-reconnect 30; client; } family inet { mtu 1492; negotiate-address; } } } } routing-options { static { route 0.0.0.0/0 { next-hop pp0.0; qualified-next-hop pp0.0 { metric 1; } } } } protocols { l2-learning { global-mode switching; } } access { profile ppp { authentication-order password; } address-assignment { pool int { family inet { network 192.168.9.0/24; range scope { low 192.168.9.30; high 192.168.9.99; } dhcp-attributes { grace-period 86400; name-server { 207.164.234.193; 198.235.214.4; } router { 192.168.8.1; 192.168.9.1; } } } } } } vlans { test { vlan-id 8; l3-interface irb.8; } test2 { vlan-id 9; l3-interface irb.9; } vlan-trust { vlan-id 100; l3-interface irb.0; } } etoghi@HOME-FIREWALL>