[j-nsp] Inserting security policies on SRX

Giuliano Cardozo Medalha giuliano at wztech.com.br
Wed May 1 12:11:46 EDT 2013


before using insert i think you need to create the policy !!!

insert is an entry more related to moving policy objects or firewall terms and not creation (set)

Sent from my iPhone

On 18/07/2011, at 17:07, "James S. Smith" <JSmith at WindMobile.ca> wrote:

> I have an SRX240 running 11.1R2.3, and occasionally I have to add new policies.  The obvious choice would seem to be use the insert command but I’m getting some weird errors.  For example, I have a number of policies for the different protocols going between the IT staff and the untrust zone.  When trying to insert a new policy the SRX complains the policy does not exist.
>  
> jsmith at fw01# insert security policies from-zone it_staff to-zone untrust policy it_staff-untrust-windows-rdp before policy it_staff-untrust-default
> error: statement 'it_staff-untrust-windows-rdp' not found
>  
>  
>  
> James S. Smith Network Architect
> WIND Mobile 207 Queen's Quay West, Suite 710 Toronto, ON M5J 1A7
>  
> Email: JSmith at WindMobile.ca
> Direct: 416-640-9792
>  
> Fax: 416-987-1203  
>  
> <image001.png><image002.png><image003.png>
> <image004.png>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp


More information about the juniper-nsp mailing list