Series Routers; Standard Firewall Filter Match Conditions For Ccc Family Firewall Filters On Acx Series Routers - Juniper ACX1000 Configuration Manual

Table 77: Nonterminating Actions for Standard Firewall Filters on ACX Series
Routers (continued)
Nonterminating Action
port-mirror
syslog
three-color-policer (single-rate |
two-rate) policer-name
traffic-class
Related
Documentation
Standard Firewall Filter Match Conditions for CCC Firewall Family Filters on ACX Series
Routers

Standard Firewall Filter Match Conditions for CCC Family Firewall Filters on ACX Series Routers

Copyright © 2017, Juniper Networks, Inc.
Description
Port-mirror the packet based
on the specified family.
NOTE: This action is
supported on ingress only.
ACX5048 and ACX5096
routers do not support
.
port-mirror
Log the packet to the system
log file.
NOTE: This action is
supported on ingress and
egress. The action on egress is
not supported for family inet6.
Police the packet using the
specified single-rate or
two-rate three-color policer.
You cannot also configure the
action for the
loss-priority
same firewall filter term. These
two actions are mutually
exclusive.
Set traffic-class code point
NOTE: This action is
supported on ingress only.
Guidelines for Configuring Firewall Filters on page 1044
Standard Firewall Filter Match Conditions and Actions on ACX Series Routers Overview
on page 1052
Standard Firewall Filter Terminating Actions on ACX Series Routers on page 1063
On ACX Series routers, you can configure a standard firewall filter with match conditions
for circuit cross-connection (CCC) traffic (family ccc).
Table 78 on page 1068 describes the match conditions you can configure at the
family ccc filter filter-name term term-name]
Chapter 32: Configuring Firewall Filters
Protocol Families
family inet
family inet
family inet6
family bridge
family any
family inet
family inet6
family mpls
family ccc
family bridge
family vpls
family inet6
hierarchy level.
[edit firewall
1067