Juniper Advanced options

Options for Policy:

Policy options for Juniper Firewall:

A.Logging logging

Use CLI to view logs

à get log traffic policy 9

Configure the logging feature of Policy:

à set policy top from untrust to home any any any permit log

B.Counting count

à set policy id 9

à set count

Count traffic that conforms to Policy

C.Schdeling customized Policy

Method based on time Enable or Disable Policy

The method of customizing time:

1. Periodic Recurrent

two。 Disposable Once

Configuration method:

a. It is best to synchronize time with the NTP server.

b. Create a custom time list

à set scheduler test once start 10 to 20 stop, 2010 14:06, 10 to 20, 2010, 14:30

c. Apply custom timesheet to Policy

à set policy id 9 from untrust to home any any any permit scheduler test

D. User Authentication user authentication

1. Authentication based on protocol (firewall authentication)

FTP

Telnet

HTTP

2. Web Authen web page authentication

Need to enter an IP address in IE, enter the user name and key after entering the web page, after passing, all access traffic will be allowed.

Configuration method:

a. Set up a user's database

à set user cjclub password cjclub

à set user cjclub type auth

Specify the role of the user

b. Configure Policy and activate WebAuth

à set policy from home to untrust any any any permit webauth

c. Restrict users in the Home section and enable WebAuth

à set interface eth3 webauth

Common viewing methods:

à get auth table

View a list of certifications

Clear users with successful authentication:

à clear auth table id XX