Juniper EX9200 Features Manual page 143

Results
Copyright © 2016, Juniper Networks, Inc.
Configure the first term to match on source addresses and then classify the matched
2.
packets.
[edit firewall family inet filter mfc-filter]
user@host# set term isp1-customers from source-address 10.1.1.0/24
user@host# set term isp1-customers from source-address 10.1.2.0/24
user@host# set term isp1-customers then loss-priority low
user@host# set term isp1-customers then forwarding-class expedited-forwarding
Configure the second term to match on different source addresses and then police
3.
the matched packets.
[edit firewall family inet filter mfc-filter]
user@host# set term isp2-customers from source-address 10.1.3.0/24
user@host# set term isp2-customers from source-address 10.1.4.0/24
user@host# set term isp2-customers then policer ef-policer
Configure the third term to police all other packets to a different set of traffic limits
4.
and actions.
[edit firewall family inet filter mfc-filter]
user@host# set term other-customers then policer af-policer
Confirm the configuration of the filter by entering the
command. If the command output does not display the intended configuration, repeat
the instructions in this procedure to correct the configuration.
[edit]
user@host# show firewall
family inet {
filter mfc-filter {
term isp1-customers {
from {
source-address 10.1.1.0/24;
source-address 10.1.2.0/24;
}
then {
loss-priority low;
forwarding-class expedited-forwarding;
}
}
term isp2-customers {
from {
source-address 10.1.3.0/24;
source-address 10.1.4.0/24;
}
then {
policer ef-policer;
}
}
term other-customers {
then {
policer af-policer;
}
}
}
}
Chapter 11: Multifield Classification
configuration mode
show firewall
125