Series Routers - Juniper ACX1000 Configuration Manual

Table 79: Bridge Family Firewall Filter Match Conditions for ACX Series Routers
Match Condition
apply-groups
apply-groups-except
destination-mac-address
destination-port
destination-prefix-list
dscp
ether-type
icmp-code
icmp-type
interface-group
ip-destination-address
ip-precedence
ip-protocol
ip-source-address
learn-vlan-1p-priority
learn-vlan-dei
learn-vlan-id
source-mac-address
source-prefix-list
source-port
user-vlan-1p-priority
user-vlan-id
vlan-ether-type
Copyright © 2017, Juniper Networks, Inc.
Table 80 on page 1070 shows the action fields supported.
Description
Set the groups from which to inherit configuration data
Set which groups will not broadcast configuration data
Set the destination MAC address
Match the TCP/UDP destination port
Match IP destination prefixes in named list.
Match the Differentiated Services (DiffServ) code point
Match the Ethernet type
Match a ICMP message code
Match a ICMP message type
Match an interface group
Match an IP destination address
Match an IP precedence value
Match an IP protocol type
Match an IP source address
Match the learned 802.1p VLAN Priority
Match user VLAN ID DEI bit
Match a learnt VLAN ID
Set the source MAC address
Match IP source prefixes in named list.
Match a TCP/UDP source port
Match user 802.1p VLAN Priority
Match a user VLAN ID
Match a VLAN Ethernet type
Chapter 32: Configuring Firewall Filters
1069