show configuration ## Last commit: 2016-02-08 14:24:28 GMT-5 by root version 11.4R9.4; system { host-name HOME-FIREWALL; domain-name 8.8.8.8; time-zone GMT-5; root-authentication { encrypted-password "$1$69e86bXa$7yF0gHNoqpJhD.BqstAGE/"; ## SECRET-DATA } name-server { 207.164.234.193; 198.235.214.4; } services { ssh; telnet; xnm-clear-text; web-management { http { interface vlan.0; } https { system-generated-certificate; interface vlan.0; } } dhcp { router { 192.168.1.1; } pool 192.168.1.0/24 { address-range low 192.168.1.2 high 192.168.1.254; domain-name 192.168.1.1; } propagate-settings fe-0/0/0.0; } } syslog { archive size 100k files 3; user * { any emergency; } file messages { any critical; authorization info; } file interactive-commands { interactive-commands error; } } max-configurations-on-flash 5; max-configuration-rollbacks 5; license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; } } ntp { server 66.185.141.22; } } interfaces { fe-0/0/0 { unit 0 { family inet; } } fe-0/0/1 { unit 0 { family inet; } } fe-0/0/2 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } fe-0/0/3 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } fe-0/0/4 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } fe-0/0/5 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } fe-0/0/6 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } fe-0/0/7 { unit 0 { encapsulation ppp-over-ether; } } lo0 { unit 0 { family inet { address 1.1.1.6/32; } } } pp0 { unit 0 { ppp-options { pap { access-profile ppp; local-name b1pycn46; local-password "$9$W3SLx-GUHq.57-ikmPQz"; ## SECRET-DATA passive; } } pppoe-options { underlying-interface fe-0/0/7.0; auto-reconnect 30; client; } family inet { mtu 1492; negotiate-address; } } } vlan { unit 0 { family inet; } unit 100 { family inet { address 192.168.1.1/24; } } } } routing-options { static { route 0.0.0.0/0 next-hop pp0.0; } } protocols { stp; } security { screen { ids-option untrust-screen { icmp { ping-death; } ip { source-route-option; tear-drop; } tcp { syn-flood { alarm-threshold 1024; attack-threshold 200; source-threshold 1024; destination-threshold 2048; timeout 20; } land; } } } nat { source { rule-set trust-to-untrust { from zone trust; to zone untrust; rule source-nat-rule { match { source-address 0.0.0.0/0; } then { source-nat { interface; } } } } rule-set trust-untrust { from zone trust; to interface pp0.0; rule Egress-Int { match { source-address 0.0.0.0/0; destination-address 0.0.0.0/0; } then { source-nat { interface; } } } } } } policies { from-zone trust to-zone untrust { policy trust-to-untrust { match { source-address any; destination-address any; application any; } then { permit; } } policy allow-all { match { source-address any; destination-address any; application any; } then { permit; } } } } zones { security-zone trust { host-inbound-traffic { system-services { all; } protocols { all; } } interfaces { vlan.0; vlan.100; } } security-zone untrust { screen untrust-screen; interfaces { fe-0/0/0.0 { host-inbound-traffic { system-services { dhcp; tftp; } } } fe-0/0/7.0 { host-inbound-traffic { system-services { all; } } } pp0.0; } } } } access { profile ppp { authentication-order password; } } vlans { vlan-trust { vlan-id 100; l3-interface vlan.100; } } root@HOME-FIREWALL> quit root@HOME-FIREWALL%