<p>Insert doesn't create it, it re-orders existing policies. IMHO it's confusingly named.</p>
<p>So you create the policy using set (which puts it at the end) then you use insert to re-order it in the position you want.</p>
<div class="gmail_quote">On May 1, 2013 8:32 AM, "James S. Smith" <<a href="mailto:JSmith@windmobile.ca">JSmith@windmobile.ca</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal">I have an SRX240 running 11.1R2.3, and occasionally I have to add new policies.  The obvious choice would seem to be use the insert command but I’m getting some weird errors.  For example, I have a number of policies for the different protocols going between the IT staff and the untrust zone.  When trying to insert a new policy the SRX complains the policy does not exist.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal">jsmith@fw01# insert security policies from-zone it_staff to-zone untrust policy it_staff-untrust-windows-rdp before policy it_staff-untrust-default<u></u><u></u></p>
<p class="MsoNormal">error: statement 'it_staff-untrust-windows-rdp' not found<u></u><u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><u></u> <u></u></p><p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;color:#0f243e">James S. Smith </span></b><span style="font-size:10.0pt;color:#0f243e">Network Architect<u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none">
<b><span style="font-size:10.0pt;color:#0f243e">WIND Mobile </span></b><span style="font-size:10.0pt;color:#0f243e">207 Queen's Quay West, Suite 710<b> </b>Toronto, ON M5J 1A7<u></u><u></u></span></p><p class="MsoNormal" style="text-autospace:none">
<span style="font-size:10.0pt;color:#0f243e"><u></u> <u></u></span></p><p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;color:#0f243e">Email: </span></b><span style="font-size:10.0pt;color:#0f243e">JSmith@WindMobile.ca<b><u></u><u></u></b></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;color:#0f243e">Direct:</span></b><span style="font-size:10.0pt;color:#0f243e"> <a href="tel:416-640-9792" value="+14166409792" target="_blank">416-640-9792</a><u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><span style="font-size:10.0pt;color:#0f243e"><u></u> <u></u></span></p><p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;color:#0f243e">Fax: </span></b><span style="font-size:10.0pt;color:#0f243e"><a href="tel:416-987-1203" value="+14169871203" target="_blank">416-987-1203</a>  <u></u><u></u></span></p>
<p class="MsoNormal" style="text-autospace:none"><b><span style="font-size:10.0pt;color:#0f243e"><u></u> <u></u></span></b></p><p class="MsoNormal" style="text-autospace:none"><a href="http://www.windmobile.ca/" target="_blank"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none"><img border="0" width="122" height="16" src="cid:image001.png@01CC4564.9C2EA310"></span></a><a href="http://www.facebook.com/WINDmobile" target="_blank"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none"><img border="0" width="140" height="16" src="cid:image002.png@01CC4564.9C2EA310"></span></a><a href="http://www.twitter.com/WINDmobile" target="_blank"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none"><img border="0" width="139" height="16" src="cid:image003.png@01CC4564.9C2EA310"></span></a><span lang="EN-CA" style="font-size:12.0pt;font-family:"Times New Roman","serif""><u></u><u></u></span></p>
<p class="MsoNormal"><a href="http://www.windmobile.ca/" target="_blank"><span style="font-size:12.0pt;font-family:"Times New Roman","serif";color:windowtext;text-decoration:none"><img border="0" width="140" height="82" src="cid:image004.png@01CC4564.9C2EA310"></span></a><u></u><u></u></p>
</div></div><br>_______________________________________________<br>
juniper-nsp mailing list <a href="mailto:juniper-nsp@puck.nether.net">juniper-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/juniper-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/juniper-nsp</a><br></blockquote></div>