SRX Services Gateway
Reply
Contributor
storerc
Posts: 47
Registered: ‎01-23-2010
0
Accepted Solution

details/settings for predefined "junos-" applications

Is there some way (or some place) I can get details on the pre-defined applications that exist within JunOS?  ie, all the applications that are predefined and prefixed w/ "junos" (junos-ping, junos-ssh, junos-sip, etc).  I would like to see the actual src/dst ports, timeouts, RPC info where appropriate, etc.

 

I found a spot in the 10.0 JunOS documentation that said there was a "show applications" command, but that doesn't seem to exist (at least not on 10.1R1.8 on SRX100 or 9.6R1.13 on a 240...)

 

Any pointers appreciated, thanks!

-Chris
Distinguished Expert
aarseniev
Posts: 1,544
Registered: ‎08-21-2009

Re: details/settings for predefined "junos-" applications

Hello,

There is such a way indeed

 

 

root> show configuration groups junos-defaults applications              
#
# File Transfer Protocol 
#
application junos-ftp {
    application-protocol ftp;
    protocol tcp;
    destination-port 21;
}
#
# Trivial File Transfer Protocol 
#
application junos-tftp {
    application-protocol tftp;
    protocol udp;
    destination-port 69;
}
#
# Real Time Streaming Protocol 
#       
application junos-rtsp {
    application-protocol rtsp;
    protocol tcp;
    destination-port 554;
}                   
#
# Network Basic Input Output System  - networking protocol used on
# Windows networks   session service port
#
application junos-netbios-session {
    protocol tcp;
    destination-port 139;
}
application junos-ssh {
    protocol tcp;
    destination-port 22;
}
application junos-telnet {
    protocol tcp;
    destination-port 23;
}
application junos-smtp {
    protocol tcp;
    destination-port 25;
}
<<long printout follows, omitted here for brevity>>

 

Regarding the timeouts

 

 

For single application entries, an application timeout lookup proceeds as follows:

-The specified timeout in the application entry database, if set.
-The default timeout in the application entry database, if specified in the predefined application.
-The protocol-based default timeout table. 

 

 

http://www.juniper.net/techpubs/software/junos-security/junos-security10.1/junos-security-swconfig-s...

 

Rgds

Alex

 

___________________________________
Accept as Solution = cool !
Accept as Solution+Kudo = You are a Star !
Contributor
storerc
Posts: 47
Registered: ‎01-23-2010
0

Re: details/settings for predefined "junos-" applications

Perfect, thank you!

 

Looks like lots of other good stuff under group junos-defaults as well.

 

Best regards!

-Chris
Contributor
zas71
Posts: 14
Registered: ‎03-12-2010
0

Re: details/settings for predefined "junos-" applications

is there a way to modify default protocol timeout or somehow make SRX to use separate timeout for management connections (telnet/ssh) to self ?

 

Here is why I'm asking:

 

http://forums.juniper.net/t5/SRX-Services-Gateway/what-is-the-proper-way-to-setup-cli-timeout-on-SRX...

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.