4 Comments on “which two levels of the Junos CLI hierarchy is the host-inbound-traffic command configured?”

1. Vijayabhaskar says:

   June 25, 2012 at 3:26 am

   we can use the command like this to allow host-inbound traffic to access teh SRX boxes..

   set security zones security-zone ABC host-inbound-traffic system-services all
   set security zones security-zone ABC interfaces ge-0/0/1.3 host-inbound-traffic
   system-services telnet
   set security zones security-zone ABC interfaces ge-0/0/1.3 host-inbound-traffic
   system-services ftp
   set security zones security-zone ABC interfaces ge-0/0/1.3 host-inbound-traffic
   system-services snmp
   set security zones security-zone ABC interfaces ge-0/0/1.0 host-inbound-traffic
   system-services all
   set security zones security-zone ABC interfaces ge-0/0/1.0 host-inbound-traffic
   system-services ftp except
   set security zones security-zone ABC interfaces ge-0/0/1.0 host-inbound-traffic
   system-services http except

   
   
   
   0

   
   
   
   0
2. w3pgrrrrr says:

   July 7, 2012 at 4:50 am

   remember as well, interface config completely overrides generalized zone config! This is tested many times in JNCIS-SEC

   
   
   
   0

   
   
   
   0
3. rpgghost says:

   August 3, 2014 at 5:51 pm

   http://www.juniper.net/techpubs/software/junos-security/junos-security10.0/junos-security-swconfig-security/id-19734.html

   security zones
   security-zone ABC {
   host-inbound-traffic {
   system-services {
   telnet;
   ftp;
   }
   }
   interfaces {
   ge-0/0/1.1;
   ge-0/0/1.3 {
   host-inbound-traffic {
   system-services {
   snmp;

   }
   }
   }
   }

   
   
   
   0

   
   
   
   0
4. mr_tienvu says:

   March 28, 2016 at 12:51 am

   Correct answer is BC

   
   
   
   0

   
   
   
   0