[{"data":1,"prerenderedAt":3226},["ShallowReactive",2],{"blog-\u002Fblog\u002Fconfiguration-regles-securite-sous-junos":3,"blog-\u002Fblog\u002Fconfiguration-regles-securite-sous-junos-surround":3091,"blog-\u002Fblog\u002Fconfiguration-regles-securite-sous-junos-certifications":3146},{"id":4,"title":5,"body":6,"categories":3076,"cover":3078,"cover_contain":261,"credly_badge_id":3079,"date":3080,"description":3081,"extension":3082,"meta":3083,"navigation":261,"path":3084,"related_certifications":3085,"seo":3087,"slug":3088,"stem":3089,"__hash__":3090},"blog\u002Fblog\u002Fconfiguration-regles-securite-sous-junos.md","Configuration de règles de sécurité sous JunoS",{"type":7,"value":8,"toc":3065},"minimark",[9,14,18,22,25,31,35,46,56,80,87,90,128,134,141,168,173,183,188,194,199,212,216,219,232,235,947,950,1087,1091,1094,1103,1106,1132,1135,1160,1163,1185,1212,1215,1256,1296,1336,1339,1357,1361,1364,1399,1434,1469,1472,1500,1503,1568,1625,1682,1685,1753,1756,1761,1917,1922,2072,2075,2225,2228,2306,2309,2314,2430,2435,2543,2548,2657,2662,2769,2776,2814,2819,2934,2939,3051,3054,3058,3061],[10,11,13],"h2",{"id":12},"cas-dusage-concret","Cas d'usage concret",[15,16,17],"p",{},"Vous devez cloisonner les flux réseau d'une infrastructure Juniper : voici comment configurer des règles de sécurité efficaces sous JunOS.",[10,19,21],{"id":20},"juniper-firefly-perimeter","Juniper firefly perimeter",[15,23,24],{},"L’évolution des systèmes informatiques vers la virtualisation, requiert une adaptation dans l’approche et la protection des ressources virtuelles. La solution de Juniper Firefly Perimeter intervient à ce niveau précis et se calque sur la sécurité des passerelles SRX. Elle offre une compatibilité avec les hyperviseurs VMware et KVM :",[15,26,27],{},[28,29,30],"em",{},"Le tarif est relativement bas pour Firefly Perimeter, environ 500€ sans option, comparé à brocade vyatta v5400 à 1800€ (prix public).",[10,32,34],{"id":33},"téléchargement-de-firefly-perimeter","Téléchargement de Firefly Perimeter",[15,36,37,38,45],{},"Deux cas de téléchargements existent, votre licence est valide et est liée à votre compte ou bien vous souhaitez simplement essayer le produit en version d’évaluation durant soixante jours. Chacune de ses possibilités requièrent un ",[39,40,44],"a",{"href":41,"rel":42},"https:\u002F\u002Ftools.juniper.net\u002Fentitlement\u002FsetupAccountInfo.do",[43],"nofollow","compte valide Juniper",".",[47,48,49],"ul",{},[50,51,52],"li",{},[53,54,55],"strong",{},"Premier cas : licence valide liée au compte",[15,57,58,59,62,63,45,68,71,72,75,76,79],{},"Une fois sur mon compte, je me rends dans l’onglet ",[53,60,61],{},"All products"," qui contient un lien nommé ",[39,64,67],{"href":65,"rel":66},"https:\u002F\u002Fwww.juniper.net\u002Fsupport\u002Fdownloads\u002F",[43],"Download Software",[69,70],"br",{},"\nUne liste apparaît, je sélectionne ",[53,73,74],{},"By"," series puis ",[53,77,78],{},"Firefly Perimeter"," :",[15,81,82],{},[83,84],"img",{"alt":85,"src":86},"","\u002Fimages\u002Fblog\u002Fconfiguration-regles-securite-sous-junos\u002F027f3ce9a9.png",[15,88,89],{},"J’utilise l’appliance VMware datant du 1 Novembre 2014 :",[91,92,96],"pre",{"className":93,"code":94,"language":95,"meta":85,"style":85},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","Firefly VMware Appliance MD5 SHA112.1X47-D15ova227,153,92021 Nov 2014\n","bash",[97,98,99],"code",{"__ignoreMap":85},[100,101,104,108,112,115,118,121,124],"span",{"class":102,"line":103},"line",1,[100,105,107],{"class":106},"sBMFI","Firefly",[100,109,111],{"class":110},"sfazB"," VMware",[100,113,114],{"class":110}," Appliance",[100,116,117],{"class":110}," MD5",[100,119,120],{"class":110}," SHA112.1X47-D15ova227,153,92021",[100,122,123],{"class":110}," Nov",[100,125,127],{"class":126},"sbssI"," 2014\n",[15,129,130,131],{},"Si une erreur apparaît c’est que vous n’êtes pas autorisé à télécharger le package ",[28,132,133],{},"(Téléchargez-le donc via la fiche produit ci-dessous).",[47,135,136],{},[50,137,138],{},[53,139,140],{},"Second cas : licence non-valide besoin d’une version d’évaluation",[15,142,143,144,149,150,155,156,158,159,164,165,79],{},"Rendez-vous donc sur la ",[39,145,148],{"href":146,"rel":147},"https:\u002F\u002Fwww.juniper.net\u002Ffr\u002Ffr\u002Fproducts-services\u002Fsecurity\u002Ffirefly-perimeter\u002F#overview",[43],"page du produit Firefly Perimeter"," puis cliquez sur l’onglet E",[39,151,154],{"href":152,"rel":153},"https:\u002F\u002Fwww.juniper.net\u002Ffr\u002Ffr\u002Fproducts-services\u002Fsecurity\u002Ffirefly-perimeter\u002F#evaluation",[43],"valution"," de Firefly Perimeter.",[69,157],{},"\nLe choix se portera sur ",[39,160,163],{"href":161,"rel":162},"http:\u002F\u002Fwww.juniper.net\u002Fsupport\u002Fdownloads\u002F?p=junosvfirefly-eval",[43],"Fichier OVA (pour l’équipement VMware Firefly Perimeter)"," puis cliquez sur ",[53,166,167],{},"Software",[15,169,170],{},[83,171],{"alt":85,"src":172},"\u002Fimages\u002Fblog\u002Fconfiguration-regles-securite-sous-junos\u002F7e324f2d61.png",[15,174,175,176,179,180,45],{},"Le déploiement de l’appliance se fera via le logiciel client vSphere sous Windows dans : ",[53,177,178],{},"Fichiers"," et ",[53,181,182],{},"Déployer le modèle OVF",[184,185,187],"h3",{"id":186},"mise-en-place-de-linfrastructure-réseau","Mise en place de l’infrastructure réseau",[15,189,190,191,193],{},"L’infrastructure virtuelle aura un accès vers l’internet via un bloc-rip fournit par OVH et sera constituée de 3 réseaux LAN distincts.",[69,192],{},"\nVoici un exemple de mise en place souhaitée avec un schéma et une seule IP WAN :",[15,195,196],{},[83,197],{"alt":85,"src":198},"\u002Fimages\u002Fblog\u002Fconfiguration-regles-securite-sous-junos\u002F0521d702d2.png",[15,200,201,204,205],{},[28,202,203],{},"Plus d’informations sur le site officiel :"," ",[39,206,209],{"href":207,"rel":208},"http:\u002F\u002Fwww.juniper.net\u002Ftechpubs\u002Fen_US\u002Ffirefly12.1x47\u002Finformation-products\u002Fpathway-pages\u002Fsecurity-virtual-perimeter-kvm-gs-guide-pwp.pdf",[43],[28,210,211],{},"documentation.",[10,213,215],{"id":214},"premier-contact-avec-firefly-perimeter","Premier contact avec Firefly Perimeter",[15,217,218],{},"Pour commencer, nous utiliserons simplement la commande suivante :",[91,220,222],{"className":93,"code":221,"language":95,"meta":85,"style":85},"root@% config-wizard\n",[97,223,224],{"__ignoreMap":85},[100,225,226,229],{"class":102,"line":103},[100,227,228],{"class":106},"root@%",[100,230,231],{"class":110}," config-wizard\n",[15,233,234],{},"Suivez le guide :",[91,236,238],{"className":93,"code":237,"language":95,"meta":85,"style":85},"Enter host name : firefly-kassianoff\n\nPlease enter root password:\nRetype root password:\n\nWould you like to configure domain name? [yes,no] (no): no\n Enter domain name: X.X.X.X\n\nWould you like to configure name server? [yes, no] (no):\n Enter IP address for the name server : 213.186.33.99\n\nWould you like to configure alternative name server? [yes, no] (no): yes\n Enter IP address for the name server: 213.186.33.199\n\nConfigure the following network interfaces\n\nIdentifier      Interface\n    1           ge-0\u002F0\u002F0\n    2           ge-0\u002F0\u002F1\n    3           ge-0\u002F0\u002F2\n    4           ge-0\u002F0\u002F3\n\nWould you like to configure any of the above interfaces? [yes,no] (yes): 1\n\nEnter one or more identifiers from the above interfaces separated by commas.\nFor example, 1,2,3\n\nPlease select interface identifiers: 1\n\n  Configure IP on interface ge-0\u002F0\u002F0\n\n    IP address for this interface: 178.30.70.49               # bloc rip fictif en 178.30.70.48\u002F29\n    Subnet mask bit length for this interface [1-32]: 29\n\nWould you like to configure default gateway? [yes, no] (no): yes\n    Enter IP address for the default gateway: 178.30.70.54\n\nWould you like to create a new user account? [yes,no] (no): no\n\nNo new user was configured.\n\nWould you like to configure SNMP Network Management? [yes,no] (no): no\n\nSNMP Network Management was not configured\n\nWould you like to review configuration commands? [yes,no] (no): yes\n\nWould you like to commit the initial configuration and exit? [yes,no]: yes\n",[97,239,240,256,263,278,288,293,327,341,346,373,400,405,432,453,458,475,480,489,498,507,516,525,530,565,570,606,618,623,640,645,661,666,689,713,718,743,765,770,802,807,823,828,856,861,880,885,912,917],{"__ignoreMap":85},[100,241,242,245,248,251,253],{"class":102,"line":103},[100,243,244],{"class":106},"Enter",[100,246,247],{"class":110}," host",[100,249,250],{"class":110}," name",[100,252,79],{"class":110},[100,254,255],{"class":110}," firefly-kassianoff\n",[100,257,259],{"class":102,"line":258},2,[100,260,262],{"emptyLinePlaceholder":261},true,"\n",[100,264,266,269,272,275],{"class":102,"line":265},3,[100,267,268],{"class":106},"Please",[100,270,271],{"class":110}," enter",[100,273,274],{"class":110}," root",[100,276,277],{"class":110}," password:\n",[100,279,281,284,286],{"class":102,"line":280},4,[100,282,283],{"class":106},"Retype",[100,285,274],{"class":110},[100,287,277],{"class":110},[100,289,291],{"class":102,"line":290},5,[100,292,262],{"emptyLinePlaceholder":261},[100,294,296,299,302,305,308,311,314,317,321,324],{"class":102,"line":295},6,[100,297,298],{"class":106},"Would",[100,300,301],{"class":110}," you",[100,303,304],{"class":110}," like",[100,306,307],{"class":110}," to",[100,309,310],{"class":110}," configure",[100,312,313],{"class":110}," domain",[100,315,316],{"class":110}," name?",[100,318,320],{"class":319},"sTEyZ"," [yes,no] (",[100,322,323],{"class":106},"no",[100,325,326],{"class":319},"): no\n",[100,328,330,333,335,338],{"class":102,"line":329},7,[100,331,332],{"class":106}," Enter",[100,334,313],{"class":110},[100,336,337],{"class":110}," name:",[100,339,340],{"class":110}," X.X.X.X\n",[100,342,344],{"class":102,"line":343},8,[100,345,262],{"emptyLinePlaceholder":261},[100,347,349,351,353,355,357,359,361,364,367,370],{"class":102,"line":348},9,[100,350,298],{"class":106},[100,352,301],{"class":110},[100,354,304],{"class":110},[100,356,307],{"class":110},[100,358,310],{"class":110},[100,360,250],{"class":110},[100,362,363],{"class":110}," server?",[100,365,366],{"class":319}," [yes, ",[100,368,369],{"class":110},"no]",[100,371,372],{"class":319}," (no):\n",[100,374,376,378,381,384,387,390,392,395,397],{"class":102,"line":375},10,[100,377,332],{"class":106},[100,379,380],{"class":110}," IP",[100,382,383],{"class":110}," address",[100,385,386],{"class":110}," for",[100,388,389],{"class":110}," the",[100,391,250],{"class":110},[100,393,394],{"class":110}," server",[100,396,79],{"class":110},[100,398,399],{"class":126}," 213.186.33.99\n",[100,401,403],{"class":102,"line":402},11,[100,404,262],{"emptyLinePlaceholder":261},[100,406,408,410,412,414,416,418,421,423,425,427,429],{"class":102,"line":407},12,[100,409,298],{"class":106},[100,411,301],{"class":110},[100,413,304],{"class":110},[100,415,307],{"class":110},[100,417,310],{"class":110},[100,419,420],{"class":110}," alternative",[100,422,250],{"class":110},[100,424,363],{"class":110},[100,426,366],{"class":319},[100,428,369],{"class":110},[100,430,431],{"class":319}," (no): yes\n",[100,433,435,437,439,441,443,445,447,450],{"class":102,"line":434},13,[100,436,332],{"class":106},[100,438,380],{"class":110},[100,440,383],{"class":110},[100,442,386],{"class":110},[100,444,389],{"class":110},[100,446,250],{"class":110},[100,448,449],{"class":110}," server:",[100,451,452],{"class":126}," 213.186.33.199\n",[100,454,456],{"class":102,"line":455},14,[100,457,262],{"emptyLinePlaceholder":261},[100,459,461,464,466,469,472],{"class":102,"line":460},15,[100,462,463],{"class":106},"Configure",[100,465,389],{"class":110},[100,467,468],{"class":110}," following",[100,470,471],{"class":110}," network",[100,473,474],{"class":110}," interfaces\n",[100,476,478],{"class":102,"line":477},16,[100,479,262],{"emptyLinePlaceholder":261},[100,481,483,486],{"class":102,"line":482},17,[100,484,485],{"class":106},"Identifier",[100,487,488],{"class":110},"      Interface\n",[100,490,492,495],{"class":102,"line":491},18,[100,493,494],{"class":106},"    1",[100,496,497],{"class":110},"           ge-0\u002F0\u002F0\n",[100,499,501,504],{"class":102,"line":500},19,[100,502,503],{"class":106},"    2",[100,505,506],{"class":110},"           ge-0\u002F0\u002F1\n",[100,508,510,513],{"class":102,"line":509},20,[100,511,512],{"class":106},"    3",[100,514,515],{"class":110},"           ge-0\u002F0\u002F2\n",[100,517,519,522],{"class":102,"line":518},21,[100,520,521],{"class":106},"    4",[100,523,524],{"class":110},"           ge-0\u002F0\u002F3\n",[100,526,528],{"class":102,"line":527},22,[100,529,262],{"emptyLinePlaceholder":261},[100,531,533,535,537,539,541,543,546,549,551,554,557,559,562],{"class":102,"line":532},23,[100,534,298],{"class":106},[100,536,301],{"class":110},[100,538,304],{"class":110},[100,540,307],{"class":110},[100,542,310],{"class":110},[100,544,545],{"class":110}," any",[100,547,548],{"class":110}," of",[100,550,389],{"class":110},[100,552,553],{"class":110}," above",[100,555,556],{"class":110}," interfaces?",[100,558,320],{"class":319},[100,560,561],{"class":106},"yes",[100,563,564],{"class":319},"): 1\n",[100,566,568],{"class":102,"line":567},24,[100,569,262],{"emptyLinePlaceholder":261},[100,571,573,575,578,581,584,587,590,592,594,597,600,603],{"class":102,"line":572},25,[100,574,244],{"class":106},[100,576,577],{"class":110}," one",[100,579,580],{"class":110}," or",[100,582,583],{"class":110}," more",[100,585,586],{"class":110}," identifiers",[100,588,589],{"class":110}," from",[100,591,389],{"class":110},[100,593,553],{"class":110},[100,595,596],{"class":110}," interfaces",[100,598,599],{"class":110}," separated",[100,601,602],{"class":110}," by",[100,604,605],{"class":110}," commas.\n",[100,607,609,612,615],{"class":102,"line":608},26,[100,610,611],{"class":106},"For",[100,613,614],{"class":110}," example,",[100,616,617],{"class":110}," 1,2,3\n",[100,619,621],{"class":102,"line":620},27,[100,622,262],{"emptyLinePlaceholder":261},[100,624,626,628,631,634,637],{"class":102,"line":625},28,[100,627,268],{"class":106},[100,629,630],{"class":110}," select",[100,632,633],{"class":110}," interface",[100,635,636],{"class":110}," identifiers:",[100,638,639],{"class":126}," 1\n",[100,641,643],{"class":102,"line":642},29,[100,644,262],{"emptyLinePlaceholder":261},[100,646,648,651,653,656,658],{"class":102,"line":647},30,[100,649,650],{"class":106},"  Configure",[100,652,380],{"class":110},[100,654,655],{"class":110}," on",[100,657,633],{"class":110},[100,659,660],{"class":110}," ge-0\u002F0\u002F0\n",[100,662,664],{"class":102,"line":663},31,[100,665,262],{"emptyLinePlaceholder":261},[100,667,669,672,674,676,679,682,685],{"class":102,"line":668},32,[100,670,671],{"class":106},"    IP",[100,673,383],{"class":110},[100,675,386],{"class":110},[100,677,678],{"class":110}," this",[100,680,681],{"class":110}," interface:",[100,683,684],{"class":126}," 178.30.70.49",[100,686,688],{"class":687},"sHwdD","               # bloc rip fictif en 178.30.70.48\u002F29\n",[100,690,692,695,698,701,704,706,708,710],{"class":102,"line":691},33,[100,693,694],{"class":106},"    Subnet",[100,696,697],{"class":110}," mask",[100,699,700],{"class":110}," bit",[100,702,703],{"class":110}," length",[100,705,386],{"class":110},[100,707,678],{"class":110},[100,709,633],{"class":110},[100,711,712],{"class":319}," [1-32]: 29\n",[100,714,716],{"class":102,"line":715},34,[100,717,262],{"emptyLinePlaceholder":261},[100,719,721,723,725,727,729,731,734,737,739,741],{"class":102,"line":720},35,[100,722,298],{"class":106},[100,724,301],{"class":110},[100,726,304],{"class":110},[100,728,307],{"class":110},[100,730,310],{"class":110},[100,732,733],{"class":110}," default",[100,735,736],{"class":110}," gateway?",[100,738,366],{"class":319},[100,740,369],{"class":110},[100,742,431],{"class":319},[100,744,746,749,751,753,755,757,759,762],{"class":102,"line":745},36,[100,747,748],{"class":106},"    Enter",[100,750,380],{"class":110},[100,752,383],{"class":110},[100,754,386],{"class":110},[100,756,389],{"class":110},[100,758,733],{"class":110},[100,760,761],{"class":110}," gateway:",[100,763,764],{"class":126}," 178.30.70.54\n",[100,766,768],{"class":102,"line":767},37,[100,769,262],{"emptyLinePlaceholder":261},[100,771,773,775,777,779,781,784,787,790,793,796,798,800],{"class":102,"line":772},38,[100,774,298],{"class":106},[100,776,301],{"class":110},[100,778,304],{"class":110},[100,780,307],{"class":110},[100,782,783],{"class":110}," create",[100,785,786],{"class":110}," a",[100,788,789],{"class":110}," new",[100,791,792],{"class":110}," user",[100,794,795],{"class":110}," account?",[100,797,320],{"class":319},[100,799,323],{"class":106},[100,801,326],{"class":319},[100,803,805],{"class":102,"line":804},39,[100,806,262],{"emptyLinePlaceholder":261},[100,808,810,813,815,817,820],{"class":102,"line":809},40,[100,811,812],{"class":106},"No",[100,814,789],{"class":110},[100,816,792],{"class":110},[100,818,819],{"class":110}," was",[100,821,822],{"class":110}," configured.\n",[100,824,826],{"class":102,"line":825},41,[100,827,262],{"emptyLinePlaceholder":261},[100,829,831,833,835,837,839,841,844,847,850,852,854],{"class":102,"line":830},42,[100,832,298],{"class":106},[100,834,301],{"class":110},[100,836,304],{"class":110},[100,838,307],{"class":110},[100,840,310],{"class":110},[100,842,843],{"class":110}," SNMP",[100,845,846],{"class":110}," Network",[100,848,849],{"class":110}," Management?",[100,851,320],{"class":319},[100,853,323],{"class":106},[100,855,326],{"class":319},[100,857,859],{"class":102,"line":858},43,[100,860,262],{"emptyLinePlaceholder":261},[100,862,864,867,869,872,874,877],{"class":102,"line":863},44,[100,865,866],{"class":106},"SNMP",[100,868,846],{"class":110},[100,870,871],{"class":110}," Management",[100,873,819],{"class":110},[100,875,876],{"class":110}," not",[100,878,879],{"class":110}," configured\n",[100,881,883],{"class":102,"line":882},45,[100,884,262],{"emptyLinePlaceholder":261},[100,886,888,890,892,894,896,899,902,905,907,909],{"class":102,"line":887},46,[100,889,298],{"class":106},[100,891,301],{"class":110},[100,893,304],{"class":110},[100,895,307],{"class":110},[100,897,898],{"class":110}," review",[100,900,901],{"class":110}," configuration",[100,903,904],{"class":110}," commands?",[100,906,320],{"class":319},[100,908,323],{"class":106},[100,910,911],{"class":319},"): yes\n",[100,913,915],{"class":102,"line":914},47,[100,916,262],{"emptyLinePlaceholder":261},[100,918,920,922,924,926,928,931,933,936,938,941,944],{"class":102,"line":919},48,[100,921,298],{"class":106},[100,923,301],{"class":110},[100,925,304],{"class":110},[100,927,307],{"class":110},[100,929,930],{"class":110}," commit",[100,932,389],{"class":110},[100,934,935],{"class":110}," initial",[100,937,901],{"class":110},[100,939,940],{"class":110}," and",[100,942,943],{"class":110}," exit?",[100,945,946],{"class":319}," [yes,no]: yes\n",[15,948,949],{},"Le récapitulatif des commandes est le suivant :",[91,951,953],{"className":93,"code":952,"language":95,"meta":85,"style":85},"set system host-name firefly-kassianoff\nset system root-authenfication encrypted-password-value \"*******\"\nset system name-server 8.8.8.8\nset interfaces ge-0\u002F0\u002F0 unit 0 family inet address 178.30.70.49\u002F29\nset system services web-management http\nset system services telnet\nset system services ssh\nset routing-options tatic route 0.0.0.0\u002F0 next-hop 178.30.70.54\n",[97,954,955,969,991,1003,1029,1044,1055,1066],{"__ignoreMap":85},[100,956,957,961,964,967],{"class":102,"line":103},[100,958,960],{"class":959},"s2Zo4","set",[100,962,963],{"class":110}," system",[100,965,966],{"class":110}," host-name",[100,968,255],{"class":110},[100,970,971,973,975,978,981,985,988],{"class":102,"line":258},[100,972,960],{"class":959},[100,974,963],{"class":110},[100,976,977],{"class":110}," root-authenfication",[100,979,980],{"class":110}," encrypted-password-value",[100,982,984],{"class":983},"sMK4o"," \"",[100,986,987],{"class":110},"*******",[100,989,990],{"class":983},"\"\n",[100,992,993,995,997,1000],{"class":102,"line":265},[100,994,960],{"class":959},[100,996,963],{"class":110},[100,998,999],{"class":110}," name-server",[100,1001,1002],{"class":126}," 8.8.8.8\n",[100,1004,1005,1007,1009,1012,1015,1018,1021,1024,1026],{"class":102,"line":280},[100,1006,960],{"class":959},[100,1008,596],{"class":110},[100,1010,1011],{"class":110}," ge-0\u002F0\u002F0",[100,1013,1014],{"class":110}," unit",[100,1016,1017],{"class":126}," 0",[100,1019,1020],{"class":110}," family",[100,1022,1023],{"class":110}," inet",[100,1025,383],{"class":110},[100,1027,1028],{"class":110}," 178.30.70.49\u002F29\n",[100,1030,1031,1033,1035,1038,1041],{"class":102,"line":290},[100,1032,960],{"class":959},[100,1034,963],{"class":110},[100,1036,1037],{"class":110}," services",[100,1039,1040],{"class":110}," web-management",[100,1042,1043],{"class":110}," http\n",[100,1045,1046,1048,1050,1052],{"class":102,"line":295},[100,1047,960],{"class":959},[100,1049,963],{"class":110},[100,1051,1037],{"class":110},[100,1053,1054],{"class":110}," telnet\n",[100,1056,1057,1059,1061,1063],{"class":102,"line":329},[100,1058,960],{"class":959},[100,1060,963],{"class":110},[100,1062,1037],{"class":110},[100,1064,1065],{"class":110}," ssh\n",[100,1067,1068,1070,1073,1076,1079,1082,1085],{"class":102,"line":343},[100,1069,960],{"class":959},[100,1071,1072],{"class":110}," routing-options",[100,1074,1075],{"class":110}," tatic",[100,1077,1078],{"class":110}," route",[100,1080,1081],{"class":110}," 0.0.0.0\u002F0",[100,1083,1084],{"class":110}," next-hop",[100,1086,764],{"class":126},[10,1088,1090],{"id":1089},"configuration-de-base","Configuration de base",[15,1092,1093],{},"Nous entamons désormais la bonne configuration pour le fonctionnement:",[91,1095,1097],{"className":93,"code":1096,"language":95,"meta":85,"style":85},"configure\n",[97,1098,1099],{"__ignoreMap":85},[100,1100,1101],{"class":102,"line":103},[100,1102,1096],{"class":106},[15,1104,1105],{},"Ajoutons l’interface externe dans la zone de sécurité internet :",[91,1107,1109],{"className":93,"code":1108,"language":95,"meta":85,"style":85},"set security zones security-zone internet interfaces ge-0\u002F0\u002F0.0\n",[97,1110,1111],{"__ignoreMap":85},[100,1112,1113,1115,1118,1121,1124,1127,1129],{"class":102,"line":103},[100,1114,960],{"class":959},[100,1116,1117],{"class":110}," security",[100,1119,1120],{"class":110}," zones",[100,1122,1123],{"class":110}," security-zone",[100,1125,1126],{"class":110}," internet",[100,1128,596],{"class":110},[100,1130,1131],{"class":110}," ge-0\u002F0\u002F0.0\n",[15,1133,1134],{},"Autorisons le trafic du service SSH du système dans la zone internet :",[91,1136,1138],{"className":93,"code":1137,"language":95,"meta":85,"style":85},"set security zones security-zone internet host-inbound-traffic system-services ssh\n",[97,1139,1140],{"__ignoreMap":85},[100,1141,1142,1144,1146,1148,1150,1152,1155,1158],{"class":102,"line":103},[100,1143,960],{"class":959},[100,1145,1117],{"class":110},[100,1147,1120],{"class":110},[100,1149,1123],{"class":110},[100,1151,1126],{"class":110},[100,1153,1154],{"class":110}," host-inbound-traffic",[100,1156,1157],{"class":110}," system-services",[100,1159,1065],{"class":110},[15,1161,1162],{},"Depuis l’extérieur nous aurons donc un accès en SSH mais n’oubliez pas d’affiner quelques paramètres :",[91,1164,1166],{"className":93,"code":1165,"language":95,"meta":85,"style":85},"set system services ssh protocol-version v2\n",[97,1167,1168],{"__ignoreMap":85},[100,1169,1170,1172,1174,1176,1179,1182],{"class":102,"line":103},[100,1171,960],{"class":959},[100,1173,963],{"class":110},[100,1175,1037],{"class":110},[100,1177,1178],{"class":110}," ssh",[100,1180,1181],{"class":110}," protocol-version",[100,1183,1184],{"class":110}," v2\n",[91,1186,1188],{"className":93,"code":1187,"language":95,"meta":85,"style":85},"set system services ssh rate-limit 3 connection-limit 3\n",[97,1189,1190],{"__ignoreMap":85},[100,1191,1192,1194,1196,1198,1200,1203,1206,1209],{"class":102,"line":103},[100,1193,960],{"class":959},[100,1195,963],{"class":110},[100,1197,1037],{"class":110},[100,1199,1178],{"class":110},[100,1201,1202],{"class":110}," rate-limit",[100,1204,1205],{"class":126}," 3",[100,1207,1208],{"class":110}," connection-limit",[100,1210,1211],{"class":126}," 3\n",[15,1213,1214],{},"La configuration des interfaces LAN dispersées dans leurs zones respectives :",[91,1216,1218],{"className":93,"code":1217,"language":95,"meta":85,"style":85},"set interfaces ge-0\u002F0\u002F1 description web\nset interfaces ge-0\u002F0\u002F1 unit 0 family inet address 192.168.10.1\u002F29\n",[97,1219,1220,1235],{"__ignoreMap":85},[100,1221,1222,1224,1226,1229,1232],{"class":102,"line":103},[100,1223,960],{"class":959},[100,1225,596],{"class":110},[100,1227,1228],{"class":110}," ge-0\u002F0\u002F1",[100,1230,1231],{"class":110}," description",[100,1233,1234],{"class":110}," web\n",[100,1236,1237,1239,1241,1243,1245,1247,1249,1251,1253],{"class":102,"line":258},[100,1238,960],{"class":959},[100,1240,596],{"class":110},[100,1242,1228],{"class":110},[100,1244,1014],{"class":110},[100,1246,1017],{"class":126},[100,1248,1020],{"class":110},[100,1250,1023],{"class":110},[100,1252,383],{"class":110},[100,1254,1255],{"class":110}," 192.168.10.1\u002F29\n",[91,1257,1259],{"className":93,"code":1258,"language":95,"meta":85,"style":85},"set interfaces ge-0\u002F0\u002F2 description management\nset interfaces ge-0\u002F0\u002F2 unit 0 family inet address 192.168.20.1\u002F29\n",[97,1260,1261,1275],{"__ignoreMap":85},[100,1262,1263,1265,1267,1270,1272],{"class":102,"line":103},[100,1264,960],{"class":959},[100,1266,596],{"class":110},[100,1268,1269],{"class":110}," ge-0\u002F0\u002F2",[100,1271,1231],{"class":110},[100,1273,1274],{"class":110}," management\n",[100,1276,1277,1279,1281,1283,1285,1287,1289,1291,1293],{"class":102,"line":258},[100,1278,960],{"class":959},[100,1280,596],{"class":110},[100,1282,1269],{"class":110},[100,1284,1014],{"class":110},[100,1286,1017],{"class":126},[100,1288,1020],{"class":110},[100,1290,1023],{"class":110},[100,1292,383],{"class":110},[100,1294,1295],{"class":110}," 192.168.20.1\u002F29\n",[91,1297,1299],{"className":93,"code":1298,"language":95,"meta":85,"style":85},"set interfaces ge-0\u002F0\u002F3 description openvpn\nset interfaces ge-0\u002F0\u002F3 unit 0 family inet address 192.168.30.1\u002F29\n",[97,1300,1301,1315],{"__ignoreMap":85},[100,1302,1303,1305,1307,1310,1312],{"class":102,"line":103},[100,1304,960],{"class":959},[100,1306,596],{"class":110},[100,1308,1309],{"class":110}," ge-0\u002F0\u002F3",[100,1311,1231],{"class":110},[100,1313,1314],{"class":110}," openvpn\n",[100,1316,1317,1319,1321,1323,1325,1327,1329,1331,1333],{"class":102,"line":258},[100,1318,960],{"class":959},[100,1320,596],{"class":110},[100,1322,1309],{"class":110},[100,1324,1014],{"class":110},[100,1326,1017],{"class":126},[100,1328,1020],{"class":110},[100,1330,1023],{"class":110},[100,1332,383],{"class":110},[100,1334,1335],{"class":110}," 192.168.30.1\u002F29\n",[15,1337,1338],{},"Précision concernant l’interface publique :",[91,1340,1342],{"className":93,"code":1341,"language":95,"meta":85,"style":85},"set interfaces ge-0\u002F0\u002F0 description WAN-01\n",[97,1343,1344],{"__ignoreMap":85},[100,1345,1346,1348,1350,1352,1354],{"class":102,"line":103},[100,1347,960],{"class":959},[100,1349,596],{"class":110},[100,1351,1011],{"class":110},[100,1353,1231],{"class":110},[100,1355,1356],{"class":110}," WAN-01\n",[10,1358,1360],{"id":1359},"configuration-de-sécurité","Configuration de sécurité",[15,1362,1363],{},"Création des différentes zones : Web, Management et Openvpn",[91,1365,1367],{"className":93,"code":1366,"language":95,"meta":85,"style":85},"set security zones security-zone web\nset security zones security-zone web interfaces ge-0\u002F0\u002F1\n",[97,1368,1369,1381],{"__ignoreMap":85},[100,1370,1371,1373,1375,1377,1379],{"class":102,"line":103},[100,1372,960],{"class":959},[100,1374,1117],{"class":110},[100,1376,1120],{"class":110},[100,1378,1123],{"class":110},[100,1380,1234],{"class":110},[100,1382,1383,1385,1387,1389,1391,1394,1396],{"class":102,"line":258},[100,1384,960],{"class":959},[100,1386,1117],{"class":110},[100,1388,1120],{"class":110},[100,1390,1123],{"class":110},[100,1392,1393],{"class":110}," web",[100,1395,596],{"class":110},[100,1397,1398],{"class":110}," ge-0\u002F0\u002F1\n",[91,1400,1402],{"className":93,"code":1401,"language":95,"meta":85,"style":85},"set security zones security-zone management\nset security zones security-zone management interfaces ge-0\u002F0\u002F2\n",[97,1403,1404,1416],{"__ignoreMap":85},[100,1405,1406,1408,1410,1412,1414],{"class":102,"line":103},[100,1407,960],{"class":959},[100,1409,1117],{"class":110},[100,1411,1120],{"class":110},[100,1413,1123],{"class":110},[100,1415,1274],{"class":110},[100,1417,1418,1420,1422,1424,1426,1429,1431],{"class":102,"line":258},[100,1419,960],{"class":959},[100,1421,1117],{"class":110},[100,1423,1120],{"class":110},[100,1425,1123],{"class":110},[100,1427,1428],{"class":110}," management",[100,1430,596],{"class":110},[100,1432,1433],{"class":110}," ge-0\u002F0\u002F2\n",[91,1435,1437],{"className":93,"code":1436,"language":95,"meta":85,"style":85},"set security zones security-zone openvpn\nset security zones security-zone openvpn interfaces ge-0\u002F0\u002F3\n",[97,1438,1439,1451],{"__ignoreMap":85},[100,1440,1441,1443,1445,1447,1449],{"class":102,"line":103},[100,1442,960],{"class":959},[100,1444,1117],{"class":110},[100,1446,1120],{"class":110},[100,1448,1123],{"class":110},[100,1450,1314],{"class":110},[100,1452,1453,1455,1457,1459,1461,1464,1466],{"class":102,"line":258},[100,1454,960],{"class":959},[100,1456,1117],{"class":110},[100,1458,1120],{"class":110},[100,1460,1123],{"class":110},[100,1462,1463],{"class":110}," openvpn",[100,1465,596],{"class":110},[100,1467,1468],{"class":110}," ge-0\u002F0\u002F3\n",[15,1470,1471],{},"Ajout de l’adresse externe dans le pool :",[91,1473,1475],{"className":93,"code":1474,"language":95,"meta":85,"style":85},"set security nat source pool wan-01 address 178.30.70.49\u002F32\n",[97,1476,1477],{"__ignoreMap":85},[100,1478,1479,1481,1483,1486,1489,1492,1495,1497],{"class":102,"line":103},[100,1480,960],{"class":959},[100,1482,1117],{"class":110},[100,1484,1485],{"class":110}," nat",[100,1487,1488],{"class":110}," source",[100,1490,1491],{"class":110}," pool",[100,1493,1494],{"class":110}," wan-01",[100,1496,383],{"class":110},[100,1498,1499],{"class":110}," 178.30.70.49\u002F32\n",[15,1501,1502],{},"Mise en place du NAT Source pour :",[91,1504,1506],{"className":93,"code":1505,"language":95,"meta":85,"style":85},"set security nat source rule-set 1 rule 1-1 match source-address 192.168.10.0\u002F29\nset security nat source rule-set 1 rule 1-1 then source-nat pool wan-01\n",[97,1507,1508,1539],{"__ignoreMap":85},[100,1509,1510,1512,1514,1516,1518,1521,1524,1527,1530,1533,1536],{"class":102,"line":103},[100,1511,960],{"class":959},[100,1513,1117],{"class":110},[100,1515,1485],{"class":110},[100,1517,1488],{"class":110},[100,1519,1520],{"class":110}," rule-set",[100,1522,1523],{"class":126}," 1",[100,1525,1526],{"class":110}," rule",[100,1528,1529],{"class":110}," 1-1",[100,1531,1532],{"class":110}," match",[100,1534,1535],{"class":110}," source-address",[100,1537,1538],{"class":110}," 192.168.10.0\u002F29\n",[100,1540,1541,1543,1545,1547,1549,1551,1553,1555,1557,1560,1563,1565],{"class":102,"line":258},[100,1542,960],{"class":959},[100,1544,1117],{"class":110},[100,1546,1485],{"class":110},[100,1548,1488],{"class":110},[100,1550,1520],{"class":110},[100,1552,1523],{"class":126},[100,1554,1526],{"class":110},[100,1556,1529],{"class":110},[100,1558,1559],{"class":110}," then",[100,1561,1562],{"class":110}," source-nat",[100,1564,1491],{"class":110},[100,1566,1567],{"class":110}," wan-01\n",[91,1569,1571],{"className":93,"code":1570,"language":95,"meta":85,"style":85},"set security nat source rule-set 1 rule 1-2 match source-address 192.168.20.0\u002F29\nset security nat source rule-set 1 rule 1-2 then source-nat pool wan-01\n",[97,1572,1573,1599],{"__ignoreMap":85},[100,1574,1575,1577,1579,1581,1583,1585,1587,1589,1592,1594,1596],{"class":102,"line":103},[100,1576,960],{"class":959},[100,1578,1117],{"class":110},[100,1580,1485],{"class":110},[100,1582,1488],{"class":110},[100,1584,1520],{"class":110},[100,1586,1523],{"class":126},[100,1588,1526],{"class":110},[100,1590,1591],{"class":110}," 1-2",[100,1593,1532],{"class":110},[100,1595,1535],{"class":110},[100,1597,1598],{"class":110}," 192.168.20.0\u002F29\n",[100,1600,1601,1603,1605,1607,1609,1611,1613,1615,1617,1619,1621,1623],{"class":102,"line":258},[100,1602,960],{"class":959},[100,1604,1117],{"class":110},[100,1606,1485],{"class":110},[100,1608,1488],{"class":110},[100,1610,1520],{"class":110},[100,1612,1523],{"class":126},[100,1614,1526],{"class":110},[100,1616,1591],{"class":110},[100,1618,1559],{"class":110},[100,1620,1562],{"class":110},[100,1622,1491],{"class":110},[100,1624,1567],{"class":110},[91,1626,1628],{"className":93,"code":1627,"language":95,"meta":85,"style":85},"set security nat source rule-set 1 rule 1-3 match source-address 192.168.30.0\u002F29\nset security nat source rule-set 1 rule 1-3 then source-nat pool wan-01\n",[97,1629,1630,1656],{"__ignoreMap":85},[100,1631,1632,1634,1636,1638,1640,1642,1644,1646,1649,1651,1653],{"class":102,"line":103},[100,1633,960],{"class":959},[100,1635,1117],{"class":110},[100,1637,1485],{"class":110},[100,1639,1488],{"class":110},[100,1641,1520],{"class":110},[100,1643,1523],{"class":126},[100,1645,1526],{"class":110},[100,1647,1648],{"class":110}," 1-3",[100,1650,1532],{"class":110},[100,1652,1535],{"class":110},[100,1654,1655],{"class":110}," 192.168.30.0\u002F29\n",[100,1657,1658,1660,1662,1664,1666,1668,1670,1672,1674,1676,1678,1680],{"class":102,"line":258},[100,1659,960],{"class":959},[100,1661,1117],{"class":110},[100,1663,1485],{"class":110},[100,1665,1488],{"class":110},[100,1667,1520],{"class":110},[100,1669,1523],{"class":126},[100,1671,1526],{"class":110},[100,1673,1648],{"class":110},[100,1675,1559],{"class":110},[100,1677,1562],{"class":110},[100,1679,1491],{"class":110},[100,1681,1567],{"class":110},[15,1683,1684],{},"Aussi, une façon plus simple et plus rapide :",[91,1686,1688],{"className":93,"code":1687,"language":95,"meta":85,"style":85},"set security nat source rule-set 1 rule 1-1 match source-address [ 192.168.10.0\u002F29 192.168.20.0\u002F29 192.168.30.0\u002F29 ]\nset security nat source rule-set 1 rule 1-1 then source-nat pool wan-01\n",[97,1689,1690,1727],{"__ignoreMap":85},[100,1691,1692,1694,1696,1698,1700,1702,1704,1706,1708,1710,1712,1715,1718,1721,1724],{"class":102,"line":103},[100,1693,960],{"class":959},[100,1695,1117],{"class":110},[100,1697,1485],{"class":110},[100,1699,1488],{"class":110},[100,1701,1520],{"class":110},[100,1703,1523],{"class":126},[100,1705,1526],{"class":110},[100,1707,1529],{"class":110},[100,1709,1532],{"class":110},[100,1711,1535],{"class":110},[100,1713,1714],{"class":319}," [ ",[100,1716,1717],{"class":110},"192.168.10.0\u002F29",[100,1719,1720],{"class":110}," 192.168.20.0\u002F29",[100,1722,1723],{"class":110}," 192.168.30.0\u002F29",[100,1725,1726],{"class":110}," ]\n",[100,1728,1729,1731,1733,1735,1737,1739,1741,1743,1745,1747,1749,1751],{"class":102,"line":258},[100,1730,960],{"class":959},[100,1732,1117],{"class":110},[100,1734,1485],{"class":110},[100,1736,1488],{"class":110},[100,1738,1520],{"class":110},[100,1740,1523],{"class":126},[100,1742,1526],{"class":110},[100,1744,1529],{"class":110},[100,1746,1559],{"class":110},[100,1748,1562],{"class":110},[100,1750,1491],{"class":110},[100,1752,1567],{"class":110},[15,1754,1755],{},"Mise en place du NAT Destination pour :",[47,1757,1758],{},[50,1759,1760],{},"Accès externe depuis 178.30.70.49:80 vers 192.168.10.1:80",[91,1762,1764],{"className":93,"code":1763,"language":95,"meta":85,"style":85},"set security nat destination pool Web-80 address 192.168.10.2\u002F32 port 80\nset security nat destination rule-set 1 from interface ge-0\u002F0\u002F0.0\nset security nat destination rule-set 1 rule 1-1 match destination-address 178.30.70.49\u002F32\nset security nat destination rule-set 1 rule 1-1 match destination-port 80\nset security nat destination rule-set 1 rule 1-1 match protocol tcp\nset security nat destination rule-set 1 rule 1-1 then destination-nat pool Web-80\n",[97,1765,1766,1793,1813,1838,1863,1889],{"__ignoreMap":85},[100,1767,1768,1770,1772,1774,1777,1779,1782,1784,1787,1790],{"class":102,"line":103},[100,1769,960],{"class":959},[100,1771,1117],{"class":110},[100,1773,1485],{"class":110},[100,1775,1776],{"class":110}," destination",[100,1778,1491],{"class":110},[100,1780,1781],{"class":110}," Web-80",[100,1783,383],{"class":110},[100,1785,1786],{"class":110}," 192.168.10.2\u002F32",[100,1788,1789],{"class":110}," port",[100,1791,1792],{"class":126}," 80\n",[100,1794,1795,1797,1799,1801,1803,1805,1807,1809,1811],{"class":102,"line":258},[100,1796,960],{"class":959},[100,1798,1117],{"class":110},[100,1800,1485],{"class":110},[100,1802,1776],{"class":110},[100,1804,1520],{"class":110},[100,1806,1523],{"class":126},[100,1808,589],{"class":110},[100,1810,633],{"class":110},[100,1812,1131],{"class":110},[100,1814,1815,1817,1819,1821,1823,1825,1827,1829,1831,1833,1836],{"class":102,"line":265},[100,1816,960],{"class":959},[100,1818,1117],{"class":110},[100,1820,1485],{"class":110},[100,1822,1776],{"class":110},[100,1824,1520],{"class":110},[100,1826,1523],{"class":126},[100,1828,1526],{"class":110},[100,1830,1529],{"class":110},[100,1832,1532],{"class":110},[100,1834,1835],{"class":110}," destination-address",[100,1837,1499],{"class":110},[100,1839,1840,1842,1844,1846,1848,1850,1852,1854,1856,1858,1861],{"class":102,"line":280},[100,1841,960],{"class":959},[100,1843,1117],{"class":110},[100,1845,1485],{"class":110},[100,1847,1776],{"class":110},[100,1849,1520],{"class":110},[100,1851,1523],{"class":126},[100,1853,1526],{"class":110},[100,1855,1529],{"class":110},[100,1857,1532],{"class":110},[100,1859,1860],{"class":110}," destination-port",[100,1862,1792],{"class":126},[100,1864,1865,1867,1869,1871,1873,1875,1877,1879,1881,1883,1886],{"class":102,"line":290},[100,1866,960],{"class":959},[100,1868,1117],{"class":110},[100,1870,1485],{"class":110},[100,1872,1776],{"class":110},[100,1874,1520],{"class":110},[100,1876,1523],{"class":126},[100,1878,1526],{"class":110},[100,1880,1529],{"class":110},[100,1882,1532],{"class":110},[100,1884,1885],{"class":110}," protocol",[100,1887,1888],{"class":110}," tcp\n",[100,1890,1891,1893,1895,1897,1899,1901,1903,1905,1907,1909,1912,1914],{"class":102,"line":295},[100,1892,960],{"class":959},[100,1894,1117],{"class":110},[100,1896,1485],{"class":110},[100,1898,1776],{"class":110},[100,1900,1520],{"class":110},[100,1902,1523],{"class":126},[100,1904,1526],{"class":110},[100,1906,1529],{"class":110},[100,1908,1559],{"class":110},[100,1910,1911],{"class":110}," destination-nat",[100,1913,1491],{"class":110},[100,1915,1916],{"class":110}," Web-80\n",[47,1918,1919],{},[50,1920,1921],{},"Accès externe despuis 178.30.70.49:443 vers 192.168.10.1:443",[91,1923,1925],{"className":93,"code":1924,"language":95,"meta":85,"style":85},"set security nat destination pool Web-443 address 192.168.10.2\u002F32 port 443\nset security nat destination rule-set 2 from interface ge-0\u002F0\u002F0.0\nset security nat destination rule-set 2 rule 2-1 match destination-address 178.30.70.49\u002F32\nset security nat destination rule-set 2 rule 2-1 match destination-port 443\nset security nat destination rule-set 2 rule 2-1 match protocol tcp\nset security nat destination rule-set 2 rule 2-1 then destination-nat pool Web-443\n",[97,1926,1927,1951,1972,1997,2021,2045],{"__ignoreMap":85},[100,1928,1929,1931,1933,1935,1937,1939,1942,1944,1946,1948],{"class":102,"line":103},[100,1930,960],{"class":959},[100,1932,1117],{"class":110},[100,1934,1485],{"class":110},[100,1936,1776],{"class":110},[100,1938,1491],{"class":110},[100,1940,1941],{"class":110}," Web-443",[100,1943,383],{"class":110},[100,1945,1786],{"class":110},[100,1947,1789],{"class":110},[100,1949,1950],{"class":126}," 443\n",[100,1952,1953,1955,1957,1959,1961,1963,1966,1968,1970],{"class":102,"line":258},[100,1954,960],{"class":959},[100,1956,1117],{"class":110},[100,1958,1485],{"class":110},[100,1960,1776],{"class":110},[100,1962,1520],{"class":110},[100,1964,1965],{"class":126}," 2",[100,1967,589],{"class":110},[100,1969,633],{"class":110},[100,1971,1131],{"class":110},[100,1973,1974,1976,1978,1980,1982,1984,1986,1988,1991,1993,1995],{"class":102,"line":265},[100,1975,960],{"class":959},[100,1977,1117],{"class":110},[100,1979,1485],{"class":110},[100,1981,1776],{"class":110},[100,1983,1520],{"class":110},[100,1985,1965],{"class":126},[100,1987,1526],{"class":110},[100,1989,1990],{"class":110}," 2-1",[100,1992,1532],{"class":110},[100,1994,1835],{"class":110},[100,1996,1499],{"class":110},[100,1998,1999,2001,2003,2005,2007,2009,2011,2013,2015,2017,2019],{"class":102,"line":280},[100,2000,960],{"class":959},[100,2002,1117],{"class":110},[100,2004,1485],{"class":110},[100,2006,1776],{"class":110},[100,2008,1520],{"class":110},[100,2010,1965],{"class":126},[100,2012,1526],{"class":110},[100,2014,1990],{"class":110},[100,2016,1532],{"class":110},[100,2018,1860],{"class":110},[100,2020,1950],{"class":126},[100,2022,2023,2025,2027,2029,2031,2033,2035,2037,2039,2041,2043],{"class":102,"line":290},[100,2024,960],{"class":959},[100,2026,1117],{"class":110},[100,2028,1485],{"class":110},[100,2030,1776],{"class":110},[100,2032,1520],{"class":110},[100,2034,1965],{"class":126},[100,2036,1526],{"class":110},[100,2038,1990],{"class":110},[100,2040,1532],{"class":110},[100,2042,1885],{"class":110},[100,2044,1888],{"class":110},[100,2046,2047,2049,2051,2053,2055,2057,2059,2061,2063,2065,2067,2069],{"class":102,"line":295},[100,2048,960],{"class":959},[100,2050,1117],{"class":110},[100,2052,1485],{"class":110},[100,2054,1776],{"class":110},[100,2056,1520],{"class":110},[100,2058,1965],{"class":126},[100,2060,1526],{"class":110},[100,2062,1990],{"class":110},[100,2064,1559],{"class":110},[100,2066,1911],{"class":110},[100,2068,1491],{"class":110},[100,2070,2071],{"class":110}," Web-443\n",[15,2073,2074],{},"Accès externe via 178.30.70.49:1194 vers 192.168.10.1:1194",[91,2076,2078],{"className":93,"code":2077,"language":95,"meta":85,"style":85},"set security nat destination pool Openvpn-1194 address 192.168.30.2\u002F32 port 1194\nset security nat destination rule-set 3 from interface ge-0\u002F0\u002F0.0\nset security nat destination rule-set 3 rule 3-1 match destination-address 178.30.70.49\u002F32\nset security nat destination rule-set 3 rule 3-1 match destination-port 1194\nset security nat destination rule-set 3 rule 3-1 match protocol tcp\nset security nat destination rule-set 3 rule 3-1 then destination-nat pool Openvpn-1194\n",[97,2079,2080,2105,2125,2150,2174,2198],{"__ignoreMap":85},[100,2081,2082,2084,2086,2088,2090,2092,2095,2097,2100,2102],{"class":102,"line":103},[100,2083,960],{"class":959},[100,2085,1117],{"class":110},[100,2087,1485],{"class":110},[100,2089,1776],{"class":110},[100,2091,1491],{"class":110},[100,2093,2094],{"class":110}," Openvpn-1194",[100,2096,383],{"class":110},[100,2098,2099],{"class":110}," 192.168.30.2\u002F32",[100,2101,1789],{"class":110},[100,2103,2104],{"class":126}," 1194\n",[100,2106,2107,2109,2111,2113,2115,2117,2119,2121,2123],{"class":102,"line":258},[100,2108,960],{"class":959},[100,2110,1117],{"class":110},[100,2112,1485],{"class":110},[100,2114,1776],{"class":110},[100,2116,1520],{"class":110},[100,2118,1205],{"class":126},[100,2120,589],{"class":110},[100,2122,633],{"class":110},[100,2124,1131],{"class":110},[100,2126,2127,2129,2131,2133,2135,2137,2139,2141,2144,2146,2148],{"class":102,"line":265},[100,2128,960],{"class":959},[100,2130,1117],{"class":110},[100,2132,1485],{"class":110},[100,2134,1776],{"class":110},[100,2136,1520],{"class":110},[100,2138,1205],{"class":126},[100,2140,1526],{"class":110},[100,2142,2143],{"class":110}," 3-1",[100,2145,1532],{"class":110},[100,2147,1835],{"class":110},[100,2149,1499],{"class":110},[100,2151,2152,2154,2156,2158,2160,2162,2164,2166,2168,2170,2172],{"class":102,"line":280},[100,2153,960],{"class":959},[100,2155,1117],{"class":110},[100,2157,1485],{"class":110},[100,2159,1776],{"class":110},[100,2161,1520],{"class":110},[100,2163,1205],{"class":126},[100,2165,1526],{"class":110},[100,2167,2143],{"class":110},[100,2169,1532],{"class":110},[100,2171,1860],{"class":110},[100,2173,2104],{"class":126},[100,2175,2176,2178,2180,2182,2184,2186,2188,2190,2192,2194,2196],{"class":102,"line":290},[100,2177,960],{"class":959},[100,2179,1117],{"class":110},[100,2181,1485],{"class":110},[100,2183,1776],{"class":110},[100,2185,1520],{"class":110},[100,2187,1205],{"class":126},[100,2189,1526],{"class":110},[100,2191,2143],{"class":110},[100,2193,1532],{"class":110},[100,2195,1885],{"class":110},[100,2197,1888],{"class":110},[100,2199,2200,2202,2204,2206,2208,2210,2212,2214,2216,2218,2220,2222],{"class":102,"line":295},[100,2201,960],{"class":959},[100,2203,1117],{"class":110},[100,2205,1485],{"class":110},[100,2207,1776],{"class":110},[100,2209,1520],{"class":110},[100,2211,1205],{"class":126},[100,2213,1526],{"class":110},[100,2215,2143],{"class":110},[100,2217,1559],{"class":110},[100,2219,1911],{"class":110},[100,2221,1491],{"class":110},[100,2223,2224],{"class":110}," Openvpn-1194\n",[15,2226,2227],{},"Déclaration de nos différentes adresses dans le carnet d’adresses  :",[91,2229,2231],{"className":93,"code":2230,"language":95,"meta":85,"style":85},"set security address-book global address wan-01 178.30.70.49\u002F32\nset security address-book global address server-web 192.168.10.2\u002F32\nset security adress-book global address server-management 192.168.20.2\u002F32\nset security address-book global address server-openvpn 192.168.30.2\u002F32\n",[97,2232,2233,2251,2269,2288],{"__ignoreMap":85},[100,2234,2235,2237,2239,2242,2245,2247,2249],{"class":102,"line":103},[100,2236,960],{"class":959},[100,2238,1117],{"class":110},[100,2240,2241],{"class":110}," address-book",[100,2243,2244],{"class":110}," global",[100,2246,383],{"class":110},[100,2248,1494],{"class":110},[100,2250,1499],{"class":110},[100,2252,2253,2255,2257,2259,2261,2263,2266],{"class":102,"line":258},[100,2254,960],{"class":959},[100,2256,1117],{"class":110},[100,2258,2241],{"class":110},[100,2260,2244],{"class":110},[100,2262,383],{"class":110},[100,2264,2265],{"class":110}," server-web",[100,2267,2268],{"class":110}," 192.168.10.2\u002F32\n",[100,2270,2271,2273,2275,2278,2280,2282,2285],{"class":102,"line":265},[100,2272,960],{"class":959},[100,2274,1117],{"class":110},[100,2276,2277],{"class":110}," adress-book",[100,2279,2244],{"class":110},[100,2281,383],{"class":110},[100,2283,2284],{"class":110}," server-management",[100,2286,2287],{"class":110}," 192.168.20.2\u002F32\n",[100,2289,2290,2292,2294,2296,2298,2300,2303],{"class":102,"line":280},[100,2291,960],{"class":959},[100,2293,1117],{"class":110},[100,2295,2241],{"class":110},[100,2297,2244],{"class":110},[100,2299,383],{"class":110},[100,2301,2302],{"class":110}," server-openvpn",[100,2304,2305],{"class":110}," 192.168.30.2\u002F32\n",[15,2307,2308],{},"Mise en place des politiques de sécurité interzones :",[47,2310,2311],{},[50,2312,2313],{},"Internet vers Web",[91,2315,2317],{"className":93,"code":2316,"language":95,"meta":85,"style":85},"set security policies from-zone internet to-zone web policy nat-dest-web match source-address any\nset security policies from-zone internet to-zone web policy nat-dest-web match destination-address server-web\nset security policies from-zone internet to-zone web policy nat-dest-web match application any\nset security policies from-zone internet to-zone web policy nat-dest-web then permit\n",[97,2318,2319,2351,2378,2405],{"__ignoreMap":85},[100,2320,2321,2323,2325,2328,2331,2333,2336,2338,2341,2344,2346,2348],{"class":102,"line":103},[100,2322,960],{"class":959},[100,2324,1117],{"class":110},[100,2326,2327],{"class":110}," policies",[100,2329,2330],{"class":110}," from-zone",[100,2332,1126],{"class":110},[100,2334,2335],{"class":110}," to-zone",[100,2337,1393],{"class":110},[100,2339,2340],{"class":110}," policy",[100,2342,2343],{"class":110}," nat-dest-web",[100,2345,1532],{"class":110},[100,2347,1535],{"class":110},[100,2349,2350],{"class":110}," any\n",[100,2352,2353,2355,2357,2359,2361,2363,2365,2367,2369,2371,2373,2375],{"class":102,"line":258},[100,2354,960],{"class":959},[100,2356,1117],{"class":110},[100,2358,2327],{"class":110},[100,2360,2330],{"class":110},[100,2362,1126],{"class":110},[100,2364,2335],{"class":110},[100,2366,1393],{"class":110},[100,2368,2340],{"class":110},[100,2370,2343],{"class":110},[100,2372,1532],{"class":110},[100,2374,1835],{"class":110},[100,2376,2377],{"class":110}," server-web\n",[100,2379,2380,2382,2384,2386,2388,2390,2392,2394,2396,2398,2400,2403],{"class":102,"line":265},[100,2381,960],{"class":959},[100,2383,1117],{"class":110},[100,2385,2327],{"class":110},[100,2387,2330],{"class":110},[100,2389,1126],{"class":110},[100,2391,2335],{"class":110},[100,2393,1393],{"class":110},[100,2395,2340],{"class":110},[100,2397,2343],{"class":110},[100,2399,1532],{"class":110},[100,2401,2402],{"class":110}," application",[100,2404,2350],{"class":110},[100,2406,2407,2409,2411,2413,2415,2417,2419,2421,2423,2425,2427],{"class":102,"line":280},[100,2408,960],{"class":959},[100,2410,1117],{"class":110},[100,2412,2327],{"class":110},[100,2414,2330],{"class":110},[100,2416,1126],{"class":110},[100,2418,2335],{"class":110},[100,2420,1393],{"class":110},[100,2422,2340],{"class":110},[100,2424,2343],{"class":110},[100,2426,1559],{"class":110},[100,2428,2429],{"class":110}," permit\n",[47,2431,2432],{},[50,2433,2434],{},"Web vers Internet",[91,2436,2438],{"className":93,"code":2437,"language":95,"meta":85,"style":85},"set security policies from-zone web to-zone internet policy nat-dest-internet match source-address server-web\nset security policies from-zone web to-zone internet policy nat-dest-internet match destination-address any\nset security policies from-zone web to-zone internet policy nat-dest-internet match application any\nset security policies from-zone web to-zone internet policy nat-dest-internet then permit\n",[97,2439,2440,2467,2493,2519],{"__ignoreMap":85},[100,2441,2442,2444,2446,2448,2450,2452,2454,2456,2458,2461,2463,2465],{"class":102,"line":103},[100,2443,960],{"class":959},[100,2445,1117],{"class":110},[100,2447,2327],{"class":110},[100,2449,2330],{"class":110},[100,2451,1393],{"class":110},[100,2453,2335],{"class":110},[100,2455,1126],{"class":110},[100,2457,2340],{"class":110},[100,2459,2460],{"class":110}," nat-dest-internet",[100,2462,1532],{"class":110},[100,2464,1535],{"class":110},[100,2466,2377],{"class":110},[100,2468,2469,2471,2473,2475,2477,2479,2481,2483,2485,2487,2489,2491],{"class":102,"line":258},[100,2470,960],{"class":959},[100,2472,1117],{"class":110},[100,2474,2327],{"class":110},[100,2476,2330],{"class":110},[100,2478,1393],{"class":110},[100,2480,2335],{"class":110},[100,2482,1126],{"class":110},[100,2484,2340],{"class":110},[100,2486,2460],{"class":110},[100,2488,1532],{"class":110},[100,2490,1835],{"class":110},[100,2492,2350],{"class":110},[100,2494,2495,2497,2499,2501,2503,2505,2507,2509,2511,2513,2515,2517],{"class":102,"line":265},[100,2496,960],{"class":959},[100,2498,1117],{"class":110},[100,2500,2327],{"class":110},[100,2502,2330],{"class":110},[100,2504,1393],{"class":110},[100,2506,2335],{"class":110},[100,2508,1126],{"class":110},[100,2510,2340],{"class":110},[100,2512,2460],{"class":110},[100,2514,1532],{"class":110},[100,2516,2402],{"class":110},[100,2518,2350],{"class":110},[100,2520,2521,2523,2525,2527,2529,2531,2533,2535,2537,2539,2541],{"class":102,"line":280},[100,2522,960],{"class":959},[100,2524,1117],{"class":110},[100,2526,2327],{"class":110},[100,2528,2330],{"class":110},[100,2530,1393],{"class":110},[100,2532,2335],{"class":110},[100,2534,1126],{"class":110},[100,2536,2340],{"class":110},[100,2538,2460],{"class":110},[100,2540,1559],{"class":110},[100,2542,2429],{"class":110},[47,2544,2545],{},[50,2546,2547],{},"Internet vers Openvpn",[91,2549,2551],{"className":93,"code":2550,"language":95,"meta":85,"style":85},"set security policies from-zone internet to-zone openvpn policy nat-dest-openvpn match source-address any\nset security policies from-zone internet to-zone openvpn policy nat-dest-openvpn match destination-address server-openvpn\nset security policies from-zone internet to-zone openvpn policy nat-dest-openvpn match application any\nset security policies from-zone internet to-zone openvpn policy nat-dest-openvpn then permit\n",[97,2552,2553,2580,2607,2633],{"__ignoreMap":85},[100,2554,2555,2557,2559,2561,2563,2565,2567,2569,2571,2574,2576,2578],{"class":102,"line":103},[100,2556,960],{"class":959},[100,2558,1117],{"class":110},[100,2560,2327],{"class":110},[100,2562,2330],{"class":110},[100,2564,1126],{"class":110},[100,2566,2335],{"class":110},[100,2568,1463],{"class":110},[100,2570,2340],{"class":110},[100,2572,2573],{"class":110}," nat-dest-openvpn",[100,2575,1532],{"class":110},[100,2577,1535],{"class":110},[100,2579,2350],{"class":110},[100,2581,2582,2584,2586,2588,2590,2592,2594,2596,2598,2600,2602,2604],{"class":102,"line":258},[100,2583,960],{"class":959},[100,2585,1117],{"class":110},[100,2587,2327],{"class":110},[100,2589,2330],{"class":110},[100,2591,1126],{"class":110},[100,2593,2335],{"class":110},[100,2595,1463],{"class":110},[100,2597,2340],{"class":110},[100,2599,2573],{"class":110},[100,2601,1532],{"class":110},[100,2603,1835],{"class":110},[100,2605,2606],{"class":110}," server-openvpn\n",[100,2608,2609,2611,2613,2615,2617,2619,2621,2623,2625,2627,2629,2631],{"class":102,"line":265},[100,2610,960],{"class":959},[100,2612,1117],{"class":110},[100,2614,2327],{"class":110},[100,2616,2330],{"class":110},[100,2618,1126],{"class":110},[100,2620,2335],{"class":110},[100,2622,1463],{"class":110},[100,2624,2340],{"class":110},[100,2626,2573],{"class":110},[100,2628,1532],{"class":110},[100,2630,2402],{"class":110},[100,2632,2350],{"class":110},[100,2634,2635,2637,2639,2641,2643,2645,2647,2649,2651,2653,2655],{"class":102,"line":280},[100,2636,960],{"class":959},[100,2638,1117],{"class":110},[100,2640,2327],{"class":110},[100,2642,2330],{"class":110},[100,2644,1126],{"class":110},[100,2646,2335],{"class":110},[100,2648,1463],{"class":110},[100,2650,2340],{"class":110},[100,2652,2573],{"class":110},[100,2654,1559],{"class":110},[100,2656,2429],{"class":110},[47,2658,2659],{},[50,2660,2661],{},"Openvpn vers Internet",[91,2663,2665],{"className":93,"code":2664,"language":95,"meta":85,"style":85},"set security policies from-zone openvpn to-zone internet policy nat-dest-internet match source-address server-openvpn\nset security policies from-zone openvpn to-zone internet policy nat-dest-internet match destination-address any\nset security policies from-zone openvpn to-zone internet policy nat-dest-internet match application any\nset security policies from-zone openvpn to-zone internet policy nat-dest-internet then permit\n",[97,2666,2667,2693,2719,2745],{"__ignoreMap":85},[100,2668,2669,2671,2673,2675,2677,2679,2681,2683,2685,2687,2689,2691],{"class":102,"line":103},[100,2670,960],{"class":959},[100,2672,1117],{"class":110},[100,2674,2327],{"class":110},[100,2676,2330],{"class":110},[100,2678,1463],{"class":110},[100,2680,2335],{"class":110},[100,2682,1126],{"class":110},[100,2684,2340],{"class":110},[100,2686,2460],{"class":110},[100,2688,1532],{"class":110},[100,2690,1535],{"class":110},[100,2692,2606],{"class":110},[100,2694,2695,2697,2699,2701,2703,2705,2707,2709,2711,2713,2715,2717],{"class":102,"line":258},[100,2696,960],{"class":959},[100,2698,1117],{"class":110},[100,2700,2327],{"class":110},[100,2702,2330],{"class":110},[100,2704,1463],{"class":110},[100,2706,2335],{"class":110},[100,2708,1126],{"class":110},[100,2710,2340],{"class":110},[100,2712,2460],{"class":110},[100,2714,1532],{"class":110},[100,2716,1835],{"class":110},[100,2718,2350],{"class":110},[100,2720,2721,2723,2725,2727,2729,2731,2733,2735,2737,2739,2741,2743],{"class":102,"line":265},[100,2722,960],{"class":959},[100,2724,1117],{"class":110},[100,2726,2327],{"class":110},[100,2728,2330],{"class":110},[100,2730,1463],{"class":110},[100,2732,2335],{"class":110},[100,2734,1126],{"class":110},[100,2736,2340],{"class":110},[100,2738,2460],{"class":110},[100,2740,1532],{"class":110},[100,2742,2402],{"class":110},[100,2744,2350],{"class":110},[100,2746,2747,2749,2751,2753,2755,2757,2759,2761,2763,2765,2767],{"class":102,"line":280},[100,2748,960],{"class":959},[100,2750,1117],{"class":110},[100,2752,2327],{"class":110},[100,2754,2330],{"class":110},[100,2756,1463],{"class":110},[100,2758,2335],{"class":110},[100,2760,1126],{"class":110},[100,2762,2340],{"class":110},[100,2764,2460],{"class":110},[100,2766,1559],{"class":110},[100,2768,2429],{"class":110},[15,2770,2771,2772,2775],{},"On se rend compte que la condition ",[53,2773,2774],{},"match application"," contient des applications déterminées et dans mon cas cela ne me convient pas. Il faut donc créer nos différentes applications que l’on utilisera ensuite entre les zones Management et Openvpn par exemple :",[91,2777,2779],{"className":93,"code":2778,"language":95,"meta":85,"style":85},"set applications application tcp22 destination-port 22\nset applications application tcp5900 destination-port 5900\n",[97,2780,2781,2798],{"__ignoreMap":85},[100,2782,2783,2785,2788,2790,2793,2795],{"class":102,"line":103},[100,2784,960],{"class":959},[100,2786,2787],{"class":110}," applications",[100,2789,2402],{"class":110},[100,2791,2792],{"class":110}," tcp22",[100,2794,1860],{"class":110},[100,2796,2797],{"class":126}," 22\n",[100,2799,2800,2802,2804,2806,2809,2811],{"class":102,"line":258},[100,2801,960],{"class":959},[100,2803,2787],{"class":110},[100,2805,2402],{"class":110},[100,2807,2808],{"class":110}," tcp5900",[100,2810,1860],{"class":110},[100,2812,2813],{"class":126}," 5900\n",[47,2815,2816],{},[50,2817,2818],{},"Management vers Openvpn",[91,2820,2822],{"className":93,"code":2821,"language":95,"meta":85,"style":85},"set security policies from-zone management to-zone openvpn policy nat-dest-openvpn match source-address server-management\nset security policies from-zone management to-zone openvpn policy nat-dest-openvpn match destination-address server-openvpn\nset security policies from-zone management to-zone openvpn policy nat-dest-openvpn match application [ tcp22 tcp5900 ]\nset security policies from-zone management to-zone openvpn policy nat-dest-openvpn then permit\n",[97,2823,2824,2851,2877,2910],{"__ignoreMap":85},[100,2825,2826,2828,2830,2832,2834,2836,2838,2840,2842,2844,2846,2848],{"class":102,"line":103},[100,2827,960],{"class":959},[100,2829,1117],{"class":110},[100,2831,2327],{"class":110},[100,2833,2330],{"class":110},[100,2835,1428],{"class":110},[100,2837,2335],{"class":110},[100,2839,1463],{"class":110},[100,2841,2340],{"class":110},[100,2843,2573],{"class":110},[100,2845,1532],{"class":110},[100,2847,1535],{"class":110},[100,2849,2850],{"class":110}," server-management\n",[100,2852,2853,2855,2857,2859,2861,2863,2865,2867,2869,2871,2873,2875],{"class":102,"line":258},[100,2854,960],{"class":959},[100,2856,1117],{"class":110},[100,2858,2327],{"class":110},[100,2860,2330],{"class":110},[100,2862,1428],{"class":110},[100,2864,2335],{"class":110},[100,2866,1463],{"class":110},[100,2868,2340],{"class":110},[100,2870,2573],{"class":110},[100,2872,1532],{"class":110},[100,2874,1835],{"class":110},[100,2876,2606],{"class":110},[100,2878,2879,2881,2883,2885,2887,2889,2891,2893,2895,2897,2899,2901,2903,2906,2908],{"class":102,"line":265},[100,2880,960],{"class":959},[100,2882,1117],{"class":110},[100,2884,2327],{"class":110},[100,2886,2330],{"class":110},[100,2888,1428],{"class":110},[100,2890,2335],{"class":110},[100,2892,1463],{"class":110},[100,2894,2340],{"class":110},[100,2896,2573],{"class":110},[100,2898,1532],{"class":110},[100,2900,2402],{"class":110},[100,2902,1714],{"class":319},[100,2904,2905],{"class":110},"tcp22",[100,2907,2808],{"class":110},[100,2909,1726],{"class":110},[100,2911,2912,2914,2916,2918,2920,2922,2924,2926,2928,2930,2932],{"class":102,"line":280},[100,2913,960],{"class":959},[100,2915,1117],{"class":110},[100,2917,2327],{"class":110},[100,2919,2330],{"class":110},[100,2921,1428],{"class":110},[100,2923,2335],{"class":110},[100,2925,1463],{"class":110},[100,2927,2340],{"class":110},[100,2929,2573],{"class":110},[100,2931,1559],{"class":110},[100,2933,2429],{"class":110},[47,2935,2936],{},[50,2937,2938],{},"Openvpn vers Management",[91,2940,2942],{"className":93,"code":2941,"language":95,"meta":85,"style":85},"set security policies from-zone openvpn to-zone management policy nat-dest-management match source-address server-openvpn\nset security policies from-zone openvpn to-zone management policy nat-dest-management match destination-address server-management\nset security policies from-zone openvpn to-zone management policy nat-dest-management match application [tcp22 tcp5900]\nset security policies from-zone openvpn to-zone management policy nat-dest-management then permit\n",[97,2943,2944,2971,2997,3027],{"__ignoreMap":85},[100,2945,2946,2948,2950,2952,2954,2956,2958,2960,2962,2965,2967,2969],{"class":102,"line":103},[100,2947,960],{"class":959},[100,2949,1117],{"class":110},[100,2951,2327],{"class":110},[100,2953,2330],{"class":110},[100,2955,1463],{"class":110},[100,2957,2335],{"class":110},[100,2959,1428],{"class":110},[100,2961,2340],{"class":110},[100,2963,2964],{"class":110}," nat-dest-management",[100,2966,1532],{"class":110},[100,2968,1535],{"class":110},[100,2970,2606],{"class":110},[100,2972,2973,2975,2977,2979,2981,2983,2985,2987,2989,2991,2993,2995],{"class":102,"line":258},[100,2974,960],{"class":959},[100,2976,1117],{"class":110},[100,2978,2327],{"class":110},[100,2980,2330],{"class":110},[100,2982,1463],{"class":110},[100,2984,2335],{"class":110},[100,2986,1428],{"class":110},[100,2988,2340],{"class":110},[100,2990,2964],{"class":110},[100,2992,1532],{"class":110},[100,2994,1835],{"class":110},[100,2996,2850],{"class":110},[100,2998,2999,3001,3003,3005,3007,3009,3011,3013,3015,3017,3019,3021,3024],{"class":102,"line":265},[100,3000,960],{"class":959},[100,3002,1117],{"class":110},[100,3004,2327],{"class":110},[100,3006,2330],{"class":110},[100,3008,1463],{"class":110},[100,3010,2335],{"class":110},[100,3012,1428],{"class":110},[100,3014,2340],{"class":110},[100,3016,2964],{"class":110},[100,3018,1532],{"class":110},[100,3020,2402],{"class":110},[100,3022,3023],{"class":319}," [tcp22 ",[100,3025,3026],{"class":110},"tcp5900]\n",[100,3028,3029,3031,3033,3035,3037,3039,3041,3043,3045,3047,3049],{"class":102,"line":280},[100,3030,960],{"class":959},[100,3032,1117],{"class":110},[100,3034,2327],{"class":110},[100,3036,2330],{"class":110},[100,3038,1463],{"class":110},[100,3040,2335],{"class":110},[100,3042,1428],{"class":110},[100,3044,2340],{"class":110},[100,3046,2964],{"class":110},[100,3048,1559],{"class":110},[100,3050,2429],{"class":110},[15,3052,3053],{},"Il suffira de faire la même manipulation entre les zones Web et Management, à vous de jouer désormais !",[10,3055,3057],{"id":3056},"conclusion","Conclusion",[15,3059,3060],{},"Cette configuration de Firefly Perimeter met en place une passerelle de sécurité virtualisée : zones internet\u002Fweb\u002Fmanagement\u002Fopenvpn, NAT source et destination, adresses et politiques de sécurité inter-zones. Cette approche permet de sécuriser plusieurs réseaux LAN distincts derrière une IP publique unique tout en gardant une granularité fine sur les flux autorisés. C'est une bonne alternative économique aux boîtiers SRX physiques pour qui souhaite virtualiser sa sécurité périmétrique.",[3062,3063,3064],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}",{"title":85,"searchDepth":258,"depth":258,"links":3066},[3067,3068,3069,3072,3073,3074,3075],{"id":12,"depth":258,"text":13},{"id":20,"depth":258,"text":21},{"id":33,"depth":258,"text":34,"children":3070},[3071],{"id":186,"depth":265,"text":187},{"id":214,"depth":258,"text":215},{"id":1089,"depth":258,"text":1090},{"id":1359,"depth":258,"text":1360},{"id":3056,"depth":258,"text":3057},[3077],"Réseau","\u002Fimages\u002Fblog\u002Fconfiguration-regles-securite-sous-junos\u002F1b4814003c.jpg",null,"2015-03-29","Les règles de sécurité sous junOS sont efficaces, simples et rapides. Une prise en main, un exemple concret avec Firefly Perimeter.","md",{},"\u002Fblog\u002Fconfiguration-regles-securite-sous-junos",[3086],"certificat-junos-associe-jncia-junos",{"title":5,"description":3081},"configuration-regles-securite-sous-junos","blog\u002Fconfiguration-regles-securite-sous-junos","p5K8UTN5pouEcj5-8UOx3Fer1ybEJobLd-qTcmrLwo4",[3092,3100,3106,3112,3118,3125,3131,3138],{"title":3093,"path":3094,"stem":3095,"date":3096,"cover":3097,"categories":3098,"children":-1},"Documentation numéro 6","\u002Fblog\u002Fbts-documentation-numero-6","blog\u002Fbts-documentation-numero-6","2015-04-13","\u002Fimages\u002Fblog\u002Fbts-documentation-numero-6\u002Ff2154dde28.jpg",[3099],"BTS",{"title":3101,"path":3102,"stem":3103,"date":3096,"cover":3104,"categories":3105,"children":-1},"Documentation numéro 7","\u002Fblog\u002Fbts-documentation-numero-7","blog\u002Fbts-documentation-numero-7","\u002Fimages\u002Fblog\u002Fbts-documentation-numero-7\u002F9b090426be.jpg",[3099],{"title":3107,"path":3108,"stem":3109,"date":3096,"cover":3110,"categories":3111,"children":-1},"Documentation numéro 8","\u002Fblog\u002Fbts-documentation-numero-8","blog\u002Fbts-documentation-numero-8","\u002Fimages\u002Fblog\u002Fbts-documentation-numero-8\u002F36bb38ac4a.jpg",[3099],{"title":3113,"path":3114,"stem":3115,"date":3096,"cover":3116,"categories":3117,"children":-1},"Documentation numéro 9","\u002Fblog\u002Fbts-documentation-numero-9","blog\u002Fbts-documentation-numero-9","\u002Fimages\u002Fblog\u002Fbts-documentation-numero-9\u002Fa7c04713bd.jpg",[3099],{"title":3119,"path":3120,"stem":3121,"date":3122,"cover":3123,"categories":3124,"children":-1},"VMware vCenter dans le vRack d’OVH","\u002Fblog\u002Fvmware-vcenter-dans-vrack-ovh","blog\u002Fvmware-vcenter-dans-vrack-ovh","2015-03-05","\u002Fimages\u002Fblog\u002Fvmware-vcenter-dans-vrack-ovh\u002F1e5012367c.png",[3077],{"title":3126,"path":3127,"stem":3128,"date":3129,"cover":3130,"categories":3079,"children":-1},"Migration vers KVM avec WebVirtMgr","\u002Fblog\u002Fmigration-vers-kvm-avec-webvirtmgr","blog\u002Fmigration-vers-kvm-avec-webvirtmgr","2015-03-02","\u002Fimages\u002Fblog\u002Fmigration-vers-kvm-avec-webvirtmgr\u002F1ecef34685.jpg",{"title":3132,"path":3133,"stem":3134,"date":3135,"cover":3136,"categories":3137,"children":-1},"Configuration d’un chassis virtuel sous Junos","\u002Fblog\u002Fconfiguration-chassis-virtuel-sous-junos","blog\u002Fconfiguration-chassis-virtuel-sous-junos","2014-12-15","\u002Fimages\u002Fblog\u002Fconfiguration-chassis-virtuel-sous-junos\u002F1b4814003c.jpg",[3077],{"title":3139,"path":3140,"stem":3141,"date":3142,"cover":3143,"categories":3144,"children":-1},"Le témoignage de ma formation au Greta-Viva5 de Valence : des anecdotes hallucinantes","\u002Fblog\u002Ftemoignage-formation-greta-viva5-valence-des-anecdotes-hallucinantes","blog\u002Ftemoignage-formation-greta-viva5-valence-des-anecdotes-hallucinantes","2014-12-01","\u002Fimages\u002Fblog\u002Ftemoignage-formation-greta-viva5-valence-des-anecdotes-hallucinantes\u002Fc0ef05db34.jpg",[3145],"Évènement",[3147],{"id":3148,"title":3149,"body":3150,"categories":3215,"cover":3217,"cover_contain":261,"credly_badge_id":3218,"date":3219,"description":3220,"extension":3082,"meta":3221,"navigation":261,"path":3222,"related_certifications":3079,"seo":3223,"slug":3086,"stem":3224,"__hash__":3225},"blog\u002Fblog\u002Fcertificat-junos-associe-jncia-junos.md","Junos Associé (JNCIA-Junos)",{"type":7,"value":3151,"toc":3211},[3152,3154,3157,3163,3200,3206,3208],[10,3153,13],{"id":12},[15,3155,3156],{},"Pour intervenir sereinement sur des équipements Juniper en clientèle, j'ai suivi ce cursus Arrow et obtenu la certification JNCIA-Junos.",[15,3158,3159,3160,3162],{},"Le parcours de formation \"Junos Associé (JNCIA-Junos)\" est dédié aux professionnel IT en charge notamment des réseaux informatiques.",[69,3161],{},"\nLe catalogue de cours aborde les modules suivants :",[47,3164,3165,3170,3175,3180,3185,3190,3195],{},[50,3166,3167],{},[53,3168,3169],{},"Principes fondamentaux de la mise en réseau",[50,3171,3172],{},[53,3173,3174],{},"Principes fondamentaux de Junos OS",[50,3176,3177],{},[53,3178,3179],{},"Interfaces utilisateur",[50,3181,3182],{},[53,3183,3184],{},"Notions de base sur la configuration",[50,3186,3187],{},[53,3188,3189],{},"Surveillance et maintenance des opérations",[50,3191,3192],{},[53,3193,3194],{},"Principes fondamentaux du routage",[50,3196,3197],{},[53,3198,3199],{},"Stratégie de routage et filtres de pare-feu",[15,3201,3202,3203,3205],{},"le temps à accorder à la formation est d'environ 3 jours.",[69,3204],{},"\nIl faut ensuite prévoir environ 1h30 pour le passage de la certification : Junos Associé (JNCIA-Junos).",[10,3207,3057],{"id":3056},[15,3209,3210],{},"Cette formation Arrow couvre les fondamentaux des réseaux et du système Junos OS, de la configuration de base au routage et aux filtres de pare-feu. Elle permet de valider une compréhension solide des équipements réseau Juniper, utile pour tout professionnel en charge de l'administration d'infrastructures réseau. Une certification complémentaire aux compétences déjà acquises sur d'autres environnements.",{"title":85,"searchDepth":258,"depth":258,"links":3212},[3213,3214],{"id":12,"depth":258,"text":13},{"id":3056,"depth":258,"text":3057},[3216,3077],"Certifications","\u002Fimages\u002Fblog\u002Fcertificat-junos-associe-jncia-junos\u002F773018337d.png","907dbe59-515c-4d6b-9ce1-e40082c63c2e","2023-01-17","Junos Associé (JNCIA-Junos) : formation Arrow, suivie pour ma veille professionnelle en cybersécurité et informatique.",{},"\u002Fblog\u002Fcertificat-junos-associe-jncia-junos",{"title":3149,"description":3220},"blog\u002Fcertificat-junos-associe-jncia-junos","FyzhACynI7FC3yrB0ozhuw0OlR2KoUUzw6tZ-4iqqZ0",1786644877853]