This patch adds support of global policies and address book on Juniper SRXs.
I tried to do it the cleanest way possible, please let me know how I can
improve it if needed.
To use it add the keyword "global_address_book" to the target line in _all_
your headers (as you can't have both per zone and global address-book).
header {
comment:: "Generated by Capirca"
target:: srx from-zone corp to-zone vpn global_address_book
}
If you need to add the "global { }" policies block do:
header {
comment:: "Generated by Capirca"
target:: srx from-zone global_policies to-zone global_policies global_address_book
}
Thanks!
Original issue reported on code.google.com by xionox on 30 Oct 2014 at 1:35
Original issue reported on code.google.com by
xionox
on 30 Oct 2014 at 1:35Attachments: