juniper防火墙定义策略生效时间

一般情况下，防火墙策略刷上后立即生效。在无改变情况下，将一直保持生效状态。

但在某些特殊情况下，需要实现在指定时间段内，防火墙策略生效。此时，在juniper防火墙上，可采用调用scheduler进行指定生效时间段。

例子：

1、先定义定时任务：

set schedulers scheduler 20171130 start-date 2017-11-30.16:50 stop-date 2017-12-27.00:00

2、定义正常防火墙策略

set security policies from-zone ESN-Pre-Production to-zone DCN1-Pre-Production policy IDC-IT_IDC-IT_20171130154134_tnurb match source-address ESN-Pre-Production_IDC-IT_171130154134_brsjz_group
set security policies from-zone ESN-Pre-Production to-zone DCN1-Pre-Production policy IDC-IT_IDC-IT_20171130154134_tnurb match destination-address DCN1-Pre-Production_IDC-IT_171130154134_xqaou_group
set security policies from-zone ESN-Pre-Production to-zone DCN1-Pre-Production policy IDC-IT_IDC-IT_20171130154134_tnurb match application TCP_8019
set security policies from-zone ESN-Pre-Production to-zone DCN1-Pre-Production policy IDC-IT_IDC-IT_20171130154134_tnurb match application junos-icmp-ping
set security policies from-zone ESN-Pre-Production to-zone DCN1-Pre-Production policy IDC-IT_IDC-IT_20171130154134_tnurb then permit

3、防火墙策略调用定时任务

set security policies from-zone ESN-Pre-Production to-zone DCN1-Pre-Production policy IDC-IT_IDC-IT_20171130154134_tnurb scheduler-name 20171130