Forwarding Table Filters For Routing Instances On Acx Series Routers; Configuring Forwarding Table Filters - Juniper ACX1000 Configuration Manual

Related
Documentation

Forwarding Table Filters for Routing Instances on ACX Series Routers

Related
Documentation

Configuring Forwarding Table Filters

Copyright © 2017, Juniper Networks, Inc.
NOTE: Filter-based forwarding on the interface will not work when source
MAC address filter is configured because the source MAC address filter takes
higher precedence over filter-based forwarding.
Example: Configuring Filter-Based Forwarding on the Source Address
Forwarding table filter is a mechanism by which all the packets forwarded by a certain
forwarding table are subjected to filtering and if a packet matches the filter condition,
the configured action is applied on the packet. You can use the forwarding table filter
mechanism to apply a filter on all interfaces associated with a single routing instance
with a simple configuration. You can apply a forwarding table filter to a routing instance
of type forwarding and also to the default routing instance
forwarding table filter, include the
<inet | inet6>] hierarchy level.
The following limitations apply to forwarding table filters configured on routing instances:
You cannot attach the same filter to more than one routing instance.
You cannot attach the same filter at both the
<inet | inet6> filter input filter-name]
forwarding-options family <inet | inet6> filter input filter-name]
You cannot attach a filter that is either interface-specific or a physical interface filter.
You cannot attach a filter to the egress direction of routing instances.
Configuring Forwarding Table Filters on page 1083
Forwarding table filters are defined the same as other firewall filters, but you apply them
differently:
Instead of applying forwarding table filters to interfaces, you apply them to forwarding
tables, each of which is associated with a routing instance and a virtual private network
(VPN).
Instead of applying input and output filters by default, you can apply an input forwarding
table filter only.
All packets are subjected to the input forwarding table filter that applies to the forwarding
table. A forwarding table filter controls which packets the router accepts and then
performs a lookup for the forwarding table, thereby controlling which packets the router
forwards on the interfaces.
Chapter 32: Configuring Firewall Filters
inet.0
statement at the
filter filter-name
[edit interfaces interface-name family
and
[edit routing-instances instance-name
. To configure a
[edit firewall family
hierarchy level.
1083