JuniperSRX Filter-Based Forwarding

就是策略路由
1) 创建routing-instance(SP1,SP2),instance-type为fowarding
edit routing-instance [SP1] instance-type forwadingset routing-options static route 0/0 nex-hop 202.100.1.1

edit routing-instance [SP2] instance-type forwading
set routing-options static route 0/0 nex-hop 202.100.2.1

2)创建firewall filter
edit friewall filter [Inside1] term [1]set from source-address 10.1.1.0/24
set then routing-instance SP1
set term [Default-Permit-All] then accept

set firewall filter [Inside1] term [1] from source-address 10.1.1.0/24set firewall filter [Inside1] term [1] from source-port xxxxset firewall filter [Inside1] term [1] destination-address x.x.x.x/xset firewall filter [Inside1] term [1] destination-port xxxxset firewall filter [Inside1] term [1] then routing-instance SP1set firewall filter [Inside1] term [Default-Permit] then accept
edit firewall filter [Inside2] term [2]set from source-address
set then routing-instance SP2
set term [Default-Permit-All] then accept

3)接口 调用filterset interface ge-0/0/2.0 family inet filter input Inside1set interfaes ge-0/0/3.0 family inet filter input Inside2
4)合并路由表run show route //查看全局路由表中，是没有前面定义的routing-instance中的路由的show routing-instances
edit routing-optionsset interface-routes rib-group inet [Policy-Routing]
edit rib-gro免费云主机域名ups [Policy-Routing]
set import-rib [inet.0 SP1.inet.0 SP2.inet.0]

run show route//查看合并后的路由表
5）创建Zone间策略:Security Policis(放行流量Inside1->Outside;Inside2->Outside)set security policies from-zone Inside1 to-zone Outside policy Default-Permit-Allset match source-address any
set match destination-address any
set match application any
set then permit
set security policies from-zone Inside2 to-zone Outside policy Default-Permit-Allset match sourc-address any
set match destination-address any
set match application-address any
set then permit

#show security policies#run show security flow session

相关推荐: 有关udf在mysql最新版本上的利用paper

有关udf在mysql最新版本上的利用pa免费云主机域名perhttps://osandamalith.com/2018/02/11/mysql-udf-exploitation/相关推荐: Web网站服务（二）Web网站服务（二）具体步骤：l 客户机地址限制…