https://www.youtube.com/watch?v=3wz4W2HwKWA&list=PLQRnLiucG_JVHWrBoWLbbUmzzm2fBpvcN

1. SRX Automation 4:
FW Policies

2. Automate FW config
 Build a srx firewall configuration
 Separate the Variables and Command
 Create a YAML file to store the variable (Playbook)
 Create a Jinja2 template to execute the command line
(template)
 Build task list.
 Create temp config file using Jinja2 template
 Update SRX config with Ansible’s “junos_install_config” module
Reference: https://github.com/JNPRAutomate/JNPRAutomateDemo-Class/

3. BASIC FW Policy

4. Basic vpn firewall policy
 Variable are defined in the playbook basic_firewall_policies.yml
 fw_policy_info: [
 policy_name : ‘Allow_Policy’
 src_zone: ‘trust’
 dst_zone: ‘untrust’
 src_ips: [‘Local’]
 dst_ips: [‘any’]
 apps: [‘any’]
 action: ‘permit’ ]

5. Jinja2 template:
fw_policy.set.j2
 Build Jinja2 template

6. Running the Playbook
 Playbook file: basic_firewall_policies.yml
 % ansible-play –i inventory.yml
playbooks/basic_firewall_policies.yml

7. Verification
 From srx
 >show configuration security policies