A branch SRX Series device in flow mode is forwarding between two virtual routers using a
paired set of logical tunnel interfaces. You have a server connected to one virtual router and
the client is on the other virtual router. How many security policies are needed to connect
from the client to the server across the logical tunnel link?
A.
2
B.
3
C.
0
D.
1
A
A
both VR are on same box so it should be 2
A, but here:
https://kb.juniper.net/InfoCenter/index?page=content&id=KB21260
policies {
from-zone Z1 to-zone Z1 {
policy Z1-Z1 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone Z2 to-zone Z2 {
policy Z2-Z2 {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}