Hi, this is my SRX210BE with JUNOS Software Release [12.1X46-D55.3] conf:
## Last changed: 2016-10-18 20:22:27 CEST version 12.1X46-D55.3; system { host-name JuniperSRX210; time-zone Europe/Rome; root-authentication { encrypted-password "password"; } name-server { 8.8.8.8; 8.8.4.4; 208.67.222.222; 208.67.220.220; } services { ssh; telnet; xnm-clear-text; web-management { http { interface vlan.0; } https { system-generated-certificate; interface vlan.0; } } dhcp { router { 192.168.5.1; } pool 192.168.5.1/24 { address-range low 192.168.5.180 high 192.168.5.254; } propagate-settings ge-0/0/0.0; } dynamic-dns { client myaddress.dyndns.com { server dyndns; agent dyndns; username username; password "password"; interface ge-0/0/0.0; } } } syslog { archive size 100k files 3; user * { any emergency; } file messages { any critical; authorization info; } file interactive-commands { interactive-commands error; } } max-configurations-on-flash 5; max-configuration-rollbacks 5; license { autoupdate { url https://ae1.juniper.net/junos/key_retrieval; } } } interfaces { ge-0/0/0 { unit 0 { family inet { dhcp; } } } ge-0/0/1 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } fe-0/0/2 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } fe-0/0/3 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } fe-0/0/4 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } fe-0/0/5 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } fe-0/0/6 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } fe-0/0/7 { unit 0 { family ethernet-switching { vlan { members vlan-trust; } } } } at-1/0/0 { encapsulation ethernet-over-atm; atm-options { vpi 8; } dsl-options { operating-mode auto; } unit 0 { encapsulation ppp-over-ether-over-atm-llc; vci 8.35; } } pp0 { traceoptions { flag all; } unit 0 { point-to-point; ppp-options { pap { default-password "password"; local-name name; local-password "password"; passive; } } pppoe-options { underlying-interface at-1/0/0.0; client; } no-keepalives; family inet { negotiate-address; } } } vlan { unit 0 { family inet { address 192.168.5.1/24; } } } } routing-options { static { route 0.0.0.0/0 { next-hop pp0.0; metric 0; } } } security { alg { ftp ftps-extension; mgcp disable; rsh; sccp disable; sip { disable; application-screen { unknown-message { permit-nat-applied; } } traceoptions { flag all; } } } flow { tcp-mss { all-tcp { mss 1350; } } } screen { ids-option untrust-screen { icmp { ping-death; } ip { source-route-option; tear-drop; } tcp { syn-flood { alarm-threshold 1024; attack-threshold 200; source-threshold 1024; destination-threshold 2048; timeout 20; } land; } } } nat { source { rule-set trust-to-untrust { from zone trust; to zone untrust; rule source-nat-rule { match { source-address 0.0.0.0/0; } then { source-nat { interface; } } } } } static { rule-set denon { from zone untrust; } } } policies { from-zone trust to-zone untrust { policy default-permit { match { source-address any; destination-address any; application any; } then { permit; } } } } traceoptions { file flowtrace size 10m world-readable; } zones { security-zone trust { host-inbound-traffic { system-services { all; } protocols { all; } } interfaces { vlan.0; } } security-zone untrust { screen untrust-screen; host-inbound-traffic { system-services { all; } protocols { all; } } interfaces { at-1/0/0.0 { host-inbound-traffic { system-services { all; } protocols { all; } } } pp0.0 { host-inbound-traffic { system-services { all; } protocols { all; } } } } } } } vlans { vlan-trust { vlan-id 3; l3-interface vlan.0; } }
It work correctly, no connection down or voip issues but i'm really need any help to add some port forwards and dmz support.
I'm really like to add:
DMZ on fe-0/0/7 at least on one local ip, the 192.168.5.80 TCP 51413 from untrust zone any ip to local ip 192.168.5.160 TCP 21 from untrust zone any ip to local ip 192.168.5.160 TCP 57532 from untrust zone any ip to local ip192.168.5.160 TCP 47313 from untrust zone any ip to local ip ip 192.168.5.100
etc.
Any suggestion or examples applied on my conf?
Also, i've not understood if dynamic dns work correctly.
Many many Thanks.