Table of Contents
Advertisement
M-series and MX-series Devices
Configuring the Firewall Filter for MPLS Family Type (NSM Procedure)
176
Table 86: inet6 Service Filter Configuration Details (continued)
Task
Define term.
You can configure firewall filters to filter MPLS packets.
To configure the MPLS firewall filter in NSM:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the device to select it.
2.
Click the Configuration tab. In the configuration tree, expand Firewall > Family >
3.
MPLS.
Add or modify settings as specified in Table 87 on page 177.
4.
Click one:
5.
OK—Saves the changes.
Cancel—Cancels the modifications.
Your Action
1.
Click Term next to service-filter.
2. Click Add new entry next to Term.
3. Expand Term.
4. In the Name box, enter the name that identifies the term.
5. In the Comment box, enter the comment for the term.
6. Expand From.
7. In the Comment box, enter the comment.
8. From the listed protocol-independent match conditions, select
the filters defined for the inet6 family type.
The protocol-independent match conditions are Address, Ah
Spi, Destination Address, Destination port, Destination prefix
List, interface Group, Next Header, Interface Set, Ip Options,
Loss Priority, Port, Prefix List, Protocol, Source Address, Source
Port, Source Prefix List, and Esp spi.
9. Click Then next to From.
10. In the Comment box, enter the comment for then.
11. In the Count box, enter the number of packets.
12. Select the Log check box to store the header information of a
packet on the Routing Engine.
13. Select the Sample check box to sample the packet traffic.
14. Select the Port Mirror check box to port-mirror the packets.
15. Select one of the following:
—To direct packets for stateful-firewall service.
service
—To let packets bypass stateful-firewall service.
skip
Copyright © 2010, Juniper Networks, Inc.
Advertisement
Table of Contents
