Compare commits
1 Commits
ai-suggest
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
| c05ce2eb26 |
2
README.md
Normal file
2
README.md
Normal file
@@ -0,0 +1,2 @@
|
|||||||
|
# SRX AI Configuration Repository
|
||||||
|
AI-generated network configurations for Juniper SRX
|
||||||
@@ -1,33 +0,0 @@
|
|||||||
# AI-Generated SRX Configuration
|
|
||||||
# Generated: 2025-09-04T21:44:16.799400
|
|
||||||
# Analysis Period: Last 7 days
|
|
||||||
|
|
||||||
# MANDATORY: Address-set definitions
|
|
||||||
set security address-book global address-set INTERNAL-NETS address 192.168.100.0/24
|
|
||||||
set security address-book global address-set EXTERNAL-NETS address 0.0.0.0/8
|
|
||||||
set security address-book global address-set DMZ-NETS address 10.0.0.0/8
|
|
||||||
### Address Book Entries:
|
|
||||||
# SECURITY FOCUS: Generate ONLY advanced security enhancements
|
|
||||||
### Rate Limiting per source IP:
|
|
||||||
set security screen rate-limit-extended WAN-screen icmp-flood-threshold 20
|
|
||||||
set security screen rate-limit-extended WAN-screen tcp-syn-flood-attack-threshold 20
|
|
||||||
set security screen rate-limit-extended WAN-screen udp-flood-protection threshold 20
|
|
||||||
set security zones security-zone WAN screen WAN-screen
|
|
||||||
### DDoS Protection Screens:
|
|
||||||
set security screen ids-option WAN-screen icmp-flood-threshold 20
|
|
||||||
set security screen ids-option WAN-screen tcp-syn-flood-attack-threshold 20
|
|
||||||
set security screen ids-option WAN-screen udp-flood-protection threshold 20
|
|
||||||
set security screen WAN-screen enable-logging session-init session-close
|
|
||||||
### IDS/IPS Features:
|
|
||||||
set security policy-map WAN-policy custom-policy
|
|
||||||
set security policy-map WAN-policy custom-policy apply rule id <urn:ietf:params:xml:ns:yang:ietf-ipsec-profile> profile-name custom-profile
|
|
||||||
set security application-identity WAN-screen custom-identity
|
|
||||||
set security application-identity WAN-screen custom-identity policy-map WAN-policy
|
|
||||||
### Address Book Entries:
|
|
||||||
### Example commands to generate:
|
|
||||||
set security screen ids-option WAN-screen icmp flood threshold 20
|
|
||||||
set security screen ids-option WAN-screen tcp syn flood attack threshold 20
|
|
||||||
set security screen rate limit extended WAN-screen icmp flood threshold 20
|
|
||||||
set security screen rate limit extended WAN-screen udp flood protection threshold 20
|
|
||||||
set security policy-map WAN-policy custom-policy
|
|
||||||
set security application-identity WAN-screen custom-identity
|
|
||||||
Reference in New Issue
Block a user