Juniper EX9200 Features Manual page 113

Table 5: Firewall Filter Match Conditions for VPLS Traffic (continued)
Match Condition
icmp-type-except number
interface interface-name
interface-group
group-number
interface-group-except
group-name
interface-set
interface-set-name
ip-address address
ip-destination-address
address
ip-precedence
ip-precedence-field
ip-precedence-except
ip-precedence-field
ip-protocol number
ipv6-address address
ip-protocol-except number
ipv6-destination-address
address
Copyright © 2016, Juniper Networks, Inc.
Description
(MX Series routers and EX Series switches only) Do not match the ICMP message type field. For
details, see the match condition.
icmp-type
Interface on which the packet was received. You can configure a match condition that matches
packets based on the interface on which they were received.
NOTE: If you configure this match condition with an interface that does not exist, the term
does not match any packet.
Match the logical interface on which the packet was received to the specified interface group or
set of interface groups. For group-number
.
255
To assign a logical interface to an interface group
[interfaces interface-name unit number family family filter group]
For more information, see Filtering Packets Received on a Set of Interface Groups Overview.
NOTE: This match condition is not supported on T4000 Type 5 FPCs.
Do not match the logical interface on which the packet was received to the specified interface
group or set of interface groups. For details, see the
NOTE: This match condition is not supported on T4000 Type 5 FPCs.
Match the interface on which the packet was received to the specified interface set.
To define an interface set, include the
For more information, see Filtering Packets Received on an Interface Set Overview.
(MX Series routers and EX Series switches only) 32-bit address that supports the standard syntax
for IPv4 addresses.
(MX Series routers and EX Series switches only) 32-bit address that is the final destination node
address for the packet.
(MX Series routers and EX Series switches only) IP precedence field. In place of the numeric field
value, you can specify one of the following text synonyms (the field values are also listed):
(0xa0), (0x60),
critical-ecp flash
(0xe0), (0x20), or
net-control priority
(MX Series routers and EX Series switches only) Do not match on the IP precedence field.
(MX Series routers and EX Series switches only) IP protocol field.
(MX Series only) 128-bit address that supports the standard syntax for IPv6 addresses.
(MX Series routers and EX Series switches only) Do not match on the IP protocol field.
(MX Series only) 128-bit address that is the final destination node address for this packet.
Chapter 11: Configuring Class of Service and Firewall Filters in VPLS
, specify a single value or a range of values from
group-number
interface-group
interface-set statement at the
(0x80),
flash-override immediate
(0x00).
routine
0 through
, specify the at the
group-number
hierarchy level.
match condition.
[edit firewall] hierarchy level.
(0x40), (0xc0),
internet-control
95