Standard Firewall Filter Match Conditions For Bridge Family Firewall Filters On Acx Series Routers - Juniper ACX1000 Configuration Manual

ACX Series Universal Access Router Configuration Guide
Table 78: CCC Family Firewall Filter Match Conditions for ACX Series Routers
Field
destination-mac-address
destination-port
dscp
icmp-code
icmp-type
ip-destination-address
ip-precedence
ip-protocol
ip-source-address
learn-vlan-1p-priority
source-mac-address
source-port
user-vlan-1p-priority
Related
Documentation
Standard Firewall Filter Match Conditions for Bridge Family Firewall Filters on ACX
Series Routers
Standard Firewall Filter Match Conditions for Bridge Family Firewall Filters on ACX Series
Routers
1068
Description
Destination MAC address
Matches TCP/UDP destination port
Matches differentiated services (DiffServ) code point
Matches ICMP message code
Matches ICMP message type
Matches destination IP address
Matches IP precedence value
Matches IP protocol type
Matches source IP address
Matches learned 802.1p VLAN priority
Source MAC address
Matches TCP/UDP source port
Matches user 802.1p VLAN priority
show firewall
clear firewall
interface-specific (Firewall Filters)
Bridge family firewall filters can be configured at the IFL-family level on ACX series routers.
Bridge family filters are used to match the L2 bridge flows based on the supported
Layer2/Layer3 fields and take firewall action. The maximum number of terms supported
for bridge firewall filters on ACX Series routers is 124.
Table 79 on page 1069 shows the match conditions supported for bridge family filters.
Copyright © 2017, Juniper Networks, Inc.