Service Filter Match Conditions For Ipv4 Traffic - Juniper ACX1000 Configuration Manual

ACX Series Universal Access Router Configuration Guide

Service Filter Match Conditions for IPv4 Traffic

Table 65: Service Filter Match Conditions for IPv4 Traffic
Match Condition Description
Match the IP destination address field.
destination-address
address
Match the UDP or TCP destination port field.
destination-port
number
You cannot specify both the
in the same term.
If you configure this match condition for IPv4 traffic, we recommend that
you also configure the
the same term to specify which protocol is being used on the port.
Match the 8-bit IP option field, if present, to the specified value or list of
ip-options values
values.
Match the IP protocol type field.
protocol number
Match the IP source address.
source-address
address
Match the UDP or TCP source port field.
source-port number
If you configure this match condition for IPv4 traffic, we recommend that
you also configure the
the same term to specify which protocol is being used on the port.
tcp-flags value Match one or more of the low-order 6 bits in the 8-bit TCP flags field in
the TCP header.
If you configure this match condition for IPv4 traffic, we recommend that
you also configure the
specify that the TCP protocol is being used on the port.
Related
Documentation
1038
In ACX Series, service filters support only a subset of the stateless firewall filter match
conditions for IPv4 traffic.
conditions.
port
protocol udp
protocol udp
protocol tcp
Enabling Inline Services Interface on ACX Series on page 1008
Understanding Service Sets on page 1028
Service Filters in ACX Series on page 1035
Guidelines for Applying Service Filters on page 1036
Service Filter Actions on page 1039
Configuring Service Sets for Network Address Translation on page 1030
Table 65 on page 1038 describes the service filter match
and match conditions
destination-port
or match statement in
protocol tcp
or match statement in
protocol tcp
match statement in the same term to
Protocol
Families
family inet
family inet
family inet
family inet
family inet
family inet
family inet
Copyright © 2017, Juniper Networks, Inc.