Series Routers - Juniper ACX1000 Configuration Manual

ACX Series Universal Access Router Configuration Guide
Table 81: Firewall Filter Match Conditions for VPLS Traffic (continued)
Match Condition
interface interface-name
interface-group
group-number
interface-group-except
group-name
interface-set
interface-set-name
ip-address address
ip-destination-address
address
ip-precedence
ip-precedence-field
ip-precedence-except
ip-precedence-field
ip-protocol number
ip-protocol-except number
1074
Description
Interface on which the packet was received. You can configure a match condition that matches
packets based on the interface on which they were received.
NOTE: If you configure this match condition with an interface that does not exist, the term
does not match any packet.
Match the logical interface on which the packet was received to the specified interface group or
set of interface groups. For group-number
.
255
To assign a logical interface to an interface group
[interfaces interface-name unit number family family filter group]
For more information, see Filtering Packets Received on a Set of Interface Groups Overview.
NOTE: This match condition is not supported on T4000 Type 5 FPCs.
Do not match the logical interface on which the packet was received to the specified interface
group or set of interface groups. For details, see the
NOTE: This match condition is not supported on T4000 Type 5 FPCs.
Match the interface on which the packet was received to the specified interface set.
To define an interface set, include the
For more information, see Filtering Packets Received on an Interface Set Overview.
(MX Series routers and EX Series switches only) 32-bit address that supports the standard syntax
for IPv4 addresses.
Note that when using this term, the match condition ether-type IPv4 must be defined on the
same term.
(MX Series routers and EX Series switches only) 32-bit address that is the final destination node
address for the packet.
Note that when using this term, the match condition ether-type IPv4 must be defined on the
same term.
(MX Series routers and EX Series switches only) IP precedence field. In place of the numeric field
value, you can specify one of the following text synonyms (the field values are also listed):
(0xa0), (0x60),
critical-ecp flash
net-control (0xe0), priority (0x20), or
(MX Series routers and EX Series switches only) Do not match on the IP precedence field.
(MX Series routers and EX Series switches only) IP protocol field.
(MX Series routers and EX Series switches only) Do not match on the IP protocol field.
, specify a single value or a range of values from
group-number
interface-group
interface-set statement at the
(0x80),
flash-override immediate
routine (0x00).
Copyright © 2017, Juniper Networks, Inc.
0 through
, specify the at the
group-number
hierarchy level.
match condition.
[edit firewall] hierarchy level.
(0x40), (0xc0),
internet-control