Conclusion
IP networks have changed drastically since they were first deployed 25 years ago, when addresses were plentiful and simple filters sufficed. In todayâs modern data networks, the concepts of yesteryear wonât float for long. Packet filters will always have their place, but without tracking state, they will always have limitations; thus, the need for stateful firewalls. With IPv4 exhaustion coming to fruition, NAT has taken a front seat in network design and is now almost a requirement.
You can deploy these services individually or as a combined security design. When combining these services, be sure to verify each step along the way to avoid a broken configuration that is a bear to troubleshoot.
Although configuration may seem a bit daunting at first, the power and scalability of JUNOS are evident in the services code. For additional service examples to accompany this chapter, please consult http://www.cubednetworks.com.
Get JUNOS Enterprise Routing now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
