Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

packet mode in SRX higg end or bypass security policy

$
0
0

There is a firewall filter to forward traffic to a forwarding instance:

 

 

 term 2 {
from {
source-address {
1.1.1.1/32;
}
destination-address {
0.0.0.0/0;
}
protocol tcp;
destination-port [ 80 443 ];
}
then {
routing-instance fwd;
accept
}

show configuration routing-instances
fwd {
instance-type forwarding;
routing-options {
static {
route 0.0.0.0/0 next-hop xxxxx;
}
instance-import xxxxxy;
}
}


For some reason, I can't add security policy to permit this traffic , 

is there any way to skip security policy check for this forwarding instacne + firewall filter in SRX1400/3600?

 


Viewing all articles
Browse latest Browse all 17645

Trending Articles