dscott@SRX210-1# show | display set |no-more set version 11.1R4.4 set system host-name SRX210-1 set system time-zone America/Los_Angeles set system root-authentication encrypted-password "***" set system name-server 208.67.222.222 set system name-server 208.67.220.220 set system login user dscott full-name "Dustin Scott" set system login user dscott uid 4000 set system login user dscott class super-user set system login user dscott authentication encrypted-password "***" set system services ssh set system services dhcp pool 172.16.1.0/24 address-range low 172.16.1.10 set system services dhcp pool 172.16.1.0/24 address-range high 172.16.1.50 set system services dhcp pool 172.16.1.0/24 name-server 4.2.2.2 set system services dhcp pool 172.16.1.0/24 router 172.16.1.1 set system services dhcp pool 172.16.1.0/24 server-identifier 172.16.1.1 set system syslog user * any emergency set system syslog file messages any critical set system syslog file messages authorization info set system syslog file interactive-commands interactive-commands error set system license autoupdate url https://ae1.juniper.net/junos/key_retrieval set system ntp server 198.137.202.16 prefer set system ntp server 74.207.249.60 set interfaces ge-0/0/0 vlan-tagging set interfaces ge-0/0/0 unit 0 vlan-id 10 set interfaces ge-0/0/0 unit 0 family inet address 172.16.1.1/24 set interfaces ge-0/0/1 unit 0 family inet address 10.10.255.1/30 set interfaces fe-0/0/7 unit 0 family inet address 192.168.1.251/24 set routing-options static route 0.0.0.0/0 next-hop 192.168.1.254 set routing-options static route 192.168.20.0/24 next-hop 10.10.255.2 set routing-options static route 192.168.30.0/24 next-hop 10.10.255.2 set security screen ids-option untrust-screen icmp ping-death set security screen ids-option untrust-screen ip source-route-option set security screen ids-option untrust-screen ip tear-drop set security screen ids-option untrust-screen tcp syn-flood alarm-threshold 1024 set security screen ids-option untrust-screen tcp syn-flood attack-threshold 200 set security screen ids-option untrust-screen tcp syn-flood source-threshold 1024 set security screen ids-option untrust-screen tcp syn-flood destination-threshold 2048 set security screen ids-option untrust-screen tcp syn-flood timeout 20 set security screen ids-option untrust-screen tcp land set security nat source rule-set trust-interface-nat from zone trust set security nat source rule-set trust-interface-nat to zone untrust set security nat source rule-set trust-interface-nat rule trust_interface_nat match source-address 0.0.0.0/0 set security nat source rule-set trust-interface-nat rule trust_interface_nat then source-nat interface set security nat source rule-set dmz-interface-nat from zone dmz set security nat source rule-set dmz-interface-nat to zone untrust set security nat source rule-set dmz-interface-nat rule dmz_interface_nat match source-address 0.0.0.0/0 set security nat source rule-set dmz-interface-nat rule dmz_interface_nat then source-nat interface set security policies default-policy permit-all set security zones security-zone untrust screen untrust-screen set security zones security-zone untrust host-inbound-traffic system-services all set security zones security-zone untrust interfaces fe-0/0/7.0 host-inbound-traffic system-services dhcp set security zones security-zone untrust interfaces fe-0/0/7.0 host-inbound-traffic system-services ssh set security zones security-zone untrust interfaces fe-0/0/7.0 host-inbound-traffic system-services ike set security zones security-zone untrust interfaces fe-0/0/7.0 host-inbound-traffic system-services https set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services ping set security zones security-zone dmz interfaces ge-0/0/0.0 host-inbound-traffic system-services ping set security zones security-zone dmz interfaces ge-0/0/0.0 host-inbound-traffic system-services dhcp