Modifiers; Class-Of-Service Overview - Juniper J2300 User Manual

J-series™ Services Router User Guide
Table 137 lists the actions and action modifiers you can specify
in stateless firewall filter terms.
Table 137: Stateless Firewall Filter Actions and Action Modifiers
Action or Action
Modifier
accept
discard
next term
reject < message-type >
routing-instance
routing-instance
Action Modifiers
count counter-name
forwarding-class
class-name
log
loss-priority priority
policer policer-name
sample
syslog

Class-of-Service Overview

With the class-of-service (CoS) features on a Services Router, you can assign service
levels with different delay, jitter (delay variation), and packet loss characteristics to
particular applications served by specific traffic flows. CoS is especially useful for
networks supporting time-sensitive video and audio applications. To configure CoS
features on a Services Router, see "Configuring Class of Service with DiffServ" on
page 427.
366
Class-of-Service Overview
Description
Accepts a packet. This is the default if the packet matches. However, we strongly recommend
that you always explicitly configure an action in the then statement.
Discards a packet silently, without sending an Internet Control Message Protocol (ICMP)
message. Packets are available for logging and sampling before being discarded.
Continues to the next term for evaluation.
Discards a packet, sending an ICMP destination unreachable message. Rejected packets
are available for logging and sampling. You can specify one of the following message
types: administratively-prohibited (default), bad-host-tos, bad-network-tos, host-prohibited,
host-unknown, host-unreachable, network-prohibited, network-unknown, network-unreachable,
port-unreachable, precedence-cutoff, precedence-violation, protocol-unreachable,
source-host-isolated, source-route-failed, or tcp-reset. If you specify tcp-reset, a TCP reset is
returned if the packet is a TCP packet. Otherwise, nothing is returned.
Routes the packet using the specified routing instance.
Counts the number of packets passing this term. The name can contain letters, numbers, and
hyphens (-), and can be up to 24 characters long. A counter name is specific to the filter that
uses it, so all interfaces that use the same filter increment the same counter.
Classifies the packet to the specified forwarding class.
Logs the packet's header information in the Routing Engine. You can access this information by
entering the show firewall log command at the CLI.
Sets the scheduling priority of the packet. The priority can be low or high.
Applies rate limits to the traffic using the named policer.
Samples the traffic on the interface. Use this modifier only when traffic sampling is enabled.
For more information, see the JUNOS Policy Framework Configuration Guide.
Records information in the system logging facility. This action can be used in conjunction with
all options except discard.