Knowledge Search


×
 

[SRX] Unable to change the value for pre-defined application on Junos 15.1X49.

  [KB31225] Show Article Properties


Summary:

This article explains why the value for pre-defined application on 15.1X49 series cannot be changed.

Symptoms:

In Junos 15.1X49, an error message is shown after attempting to change or edit any value of a pre-defined application; "junos-*".

Example 1

Edit a term of junos-sip.

root@SRX# edit applications application junos-sip term t1
error: cannot use reserved identifier:
junos-sip

Example 2

Set a new inactivity-timeout of junos-ftp.

root@SRX# set applications application junos-ftp inactivity-timeout 9000
error: cannot use reserved identifier: junos-ftp
Cause:

The error message is the expected behavior from Junos 13.3 and higher. It appeared beginning on SRX from Junos 15.1X49. Editing a pre-defined application is NOT allowed.

Solution:

Take the following steps to create a new custom application.

  1. Find the content of a pre-defined application.

  2. root@SRX# show groups junos-defaults applications application junos-sip
    term t1 alg sip protocol udp destination-port 5060;
    term t2 alg sip protocol tcp destination-port 5060;

  3. Create a new one following the content of the original pre-defined application.

    root@SRX# set applications application My-SIP term t1 alg sip protocol udp destination-port 5060 inactivity-timeout 3600
    root@SRX# set applications application My-SIP term t2 alg sip protocol tcp destination-port 5060 inactivity-timeout 3600
  4. Verify the newly configured application

    root@SRX# show applications application My-SIP
    term t1 alg sip protocol udp destination-port 5060 inactivity-timeout 3600;
    term t2 alg sip protocol tcp destination-port 5060 inactivity-timeout 3600;
  5. Commit

    root@SRX# commit

Related Links: