How to define a port range on a Juniper SRX

To create a range of ports within the SRX the following command is used. This example creates an application object named UDP-PORT-RANGE with a UDP port range of 5000-6999.

set applications application UDP-PORT-RANGE protocol udp destination-port 5000-6999

Once created you can then add this to a group. This group can then be added to the necessary policy. Below shows an example:

set groups GRP-PORTS
set applications application-set GRP-PORTS application RDP-3389
set applications application-set GRP-PORTS application UDP-PORT-RANGE

set security policies from-zone untrust to-zone trust policy example-policy match application GRP-PORTS

About the Author


R Donato

Rick Donato is the Founder and Chief Editor of He currently works as an SDN/NFV Solutions Architect and has a keen interest in automation and the cloud.

You can find Rick on Twitter @f3lix001