1. Juniper ESCR Tesco Day 3

2. Overview Day #1 Maintenance and monitoring Routing protocols Lab Day #2 Introduction to Juniper devices Junos CLI System and interface configuration Lab DAY #4 QoS FHRP Lab DAY #3 Routing policy Lab Firewall filters Lab

3. Routing policy

5.  defined in policy-option – policy-statement configuration stanza  to make a policy active you have to assign it to protocol, group or neighbour

7. Definition of policy policy-options { policy-statement loopbacks-to-bgp { term 1 { from { protocol direct; route-filter 1.1.1.1/32 exact; route-filter 11.11.11.11/32 exact; } then accept; }

8. Activation of routing policy protocols { bgp { group ebgp { export loopbacks-to-bgp; neighbor 192.168.12.2 { export to-JR2; peer-as 100; } neighbor 192.168.13.3 { peer-as 100; }

9. Firewall filters a.k.a. ACL  Stateless firewall  Protecting Routing Engine (lo0)  Protecting network infrastructure (interface)

10. Firewall filters  Firewall filters are defined in firewall – filter configuration stanza.  Can be assign as input or output for particular interface  commit confirm as your 2nd chance

12. firewall { filter Protect-lo0 { term telnet-from-lo0s { from { source-address { 5.5.5.0/24; } protocol tcp; destination-port telnet; } then { log; reject; } term accept-all { then accept; }