How to Restrict Access to the Control Plane of Junipe SRX Firewall - SSH Management
How to #Restrict Access to Control Plane - #SSH Management on the Juniper #SRX Firewall :
set security address-book global address vIOS1 192.168.255.43/32
set security address-book global address vIOS2 192.168.255.42/32
set security policies from-zone untrust to-zone junos-host policy SRX_MANAGEMENT match source-address vIOS1
set security policies from-zone untrust to-zone junos-host policy SRX_MANAGEMENT match destination-address any
set security policies from-zone untrust to-zone junos-host policy SRX_MANAGEMENT match application junos-ssh
set security policies from-zone untrust to-zone junos-host policy SRX_MANAGEMENT then permit
set security policies from-zone untrust to-zone junos-host policy SRX_MANAGEMENT then log session-init
set security policies from-zone untrust to-zone junos-host policy SRX_MANAGEMENT then log session-close
set security policies from-zone untrust to-zone junos-host policy SRX_DENY_NON_MANAGER match source-address any
set security policies from-zone untrust to-zone junos-host policy SRX_DENY_NON_MANAGER match destination-address any
set security policies from-zone untrust to-zone junos-host policy SRX_DENY_NON_MANAGER match application junos-ssh
set security policies from-zone untrust to-zone junos-host policy SRX_DENY_NON_MANAGER then deny
set security policies from-zone untrust to-zone junos-host policy SRX_DENY_NON_MANAGER then log session-init
set security policies from-zone untrust to-zone junos-host policy SRX_PERMIT_ALL match source-address any
set security policies from-zone untrust to-zone junos-host policy SRX_PERMIT_ALL match destination-address any
set security policies from-zone untrust to-zone junos-host policy SRX_PERMIT_ALL match application any
set security policies from-zone untrust to-zone junos-host policy SRX_PERMIT_ALL then permit
set security policies from-zone untrust to-zone junos-host policy SRX_PERMIT_ALL then log session-init
set security policies from-zone untrust to-zone junos-host policy SRX_PERMIT_ALL then log session-close
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services ssh
Please Like and Subscribe ...