Fly Tower SSG-5 Firewall port mapping command line setting

SSG-5 is the Juniper Firewall entry level products, some emergency situations need to log into the intranet of a PC or server, need to temporarily open the firewall 3389 ports and do the corresponding VIP mapping.

The command line is naturally the fastest and least error-prone way. The setting method is as follows:

Set Service "3389" protocol tcp src-port 0-65535 dst-port 3389-3389-------Open telnet 3389 port

Set interface ethernet0/0 VIP interface-ip 3389 "3389" 192.168.1.5--------Add IP port mappings to remotely log on devices

Set policy ID 3 from ' untrust ' to ' trust ' "any" "VIP (ethernet0/0)" "3389" permit log-------set port policy and IDs

Set Policy ID 3

Exit

The above set is only in Untrust to the Trust and trust to Untrust are permit any situation, if there is the policy of the deny, need to pay attention to the order of policy.

This article from the "Operation and maintenance work Struggle" blog, please be sure to retain this source http://yanghuawu.blog.51cto.com/2638960/662447