How to Configure Firewall #Filter Control Plane #Management on Juniper #SRX
set policy-options prefix-list MANAGER_IP 2.2.2.1/32
set firewall filter LOCKDOWN term 1 from source-address 0.0.0.0/0
set firewall filter LOCKDOWN term 1 from source-prefix-list MANAGER_IP except
set firewall filter LOCKDOWN term 1 from protocol tcp
set firewall filter LOCKDOWN term 1 from destination-port ssh
set firewall filter LOCKDOWN term 1 then log
set firewall filter LOCKDOWN term 1 then syslog
set firewall filter LOCKDOWN term 1 then discard
set firewall filter LOCKDOWN term 2 then accept
set interfaces ge-0/0/1 unit 0 family inet filter input LOCKDOWN
set security zones security-zone untrust interfaces ge-0/0/1.0 host-inbound-traffic system-services ssh
Please like and Subscribe ...