Firewall Filter Protocol Families - Juniper ACX1000 Configuration Manual

Firewall Filter Protocol Families

Copyright © 2017, Juniper Networks, Inc.
match-conditions;
protocol (tcp | udp) {
match conditions;
}
}
}
then {
actions;
}
}
}
}
}
You can include the firewall configuration at one of the following hierarchy levels:
[edit]
[edit logical-systems logical-system-name]
NOTE: For stateless firewall filtering, you must allow the output tunnel traffic
through the firewall filter applied to input traffic on the interface that is the
next-hop interface toward the tunnel destination. The firewall filter affects
only the packets exiting the router (or switch) by way of the tunnel.
A firewall filter configuration is specific to a particular protocol family. Under the
statement, include one of the following statements to specify the protocol family for
which you want to filter traffic:
—To filter protocol-independent traffic.
family any
family inet —To filter Internet Protocol version 4 (IPv4) traffic.
—To filter Internet Protocol version 6 (IPv6) traffic.
family inet6
—To filter MPLS traffic.
family mpls
—To filter virtual private LAN service (VPLS) traffic.
family vpls
—To filter Layer 2 circuit cross-connection (CCC) traffic.
family ccc
—To filter Layer 2 bridging traffic for MX Series 3D Universal Edge Routers
family bridge
only.
family ethernet-switching
The family family-name statement is required only to specify a protocol family other than
IPv4. To configure an IPv4 firewall filter, you can configure the filter at the
hierarchy level without including the
and [edit firewall family inet]
—To filter Layer 2 (Ethernet) traffic.
statement, because the
family inet
hierarchy levels are equivalent.
Chapter 32: Configuring Firewall Filters
firewall
[edit firewall]
[edit firewall]
1045