Juniper NETWORK AND SECURITY MANAGER 2010.4 - M-SERIES AND MX-SERIES DEVICES GUIDE REV 1 Manual page 214

M-series and MX-series Devices
Related
Documentation
178
Table 87: MPLS Firewall Filter Configuration Details (continued)
Task
Define a firewall filter term.
Configuring the Firewall Filter for Any Family Type (NSM Procedure) on page 161
Configuring Filters for inet Family Type (NSM Procedure) on page 167
Configuring Filters for inet6 Family Type (NSM Procedure) on page 172
Your Action
1. Click Term next to Accounting Profile.
2. Click Add new entry next to Term.
3. Expand Term.
4. In the Name box, enter the name that identifies the term.
5. In the Comment box, enter the comment for the term.
6. From the Filter list, select the name that identifies the filter.
7. Expand From.
8. In the Comment box, enter the comment.
9. From the listed protocol-independent match conditions, select
the filters defined for the MPLS family type.
The protocol-independent match conditions are Exp,
Forwarding Class, Interface, Interface Set, and Loss Priority.
10. Expand Then.
11. In the Comment box, enter the comment for then.
12. In the Count box, enter the number of packets.
13. Select the Sample check box to sample the packet traffic.
14. From the Loss Priority list, set the packet loss priority (PLP) to
low, medium-low, medium-high, or high.
15. In the Forwarding Class box, enter the packet forwarding class
name.
16. Click Accept next to Then.
17. Select one of the following:
Select Accept to accept a packet.
Select Discard to discard a packet silently, without sending
an ICMP message.
Select Next to evaluate the next term in the firewall filter.
18. Click Policer next to Then.
19. Select one of the following:
Policer—To configure a new policer for each filter and select
the policer name.
Select three-color-policer—To configure a tricolor marking
policer,
a. Expand Three Color Policer.
b. Click Single Rate next to Three Color Policer.
c. Select one of the following:
single-rate—If the named tricolor policer is a
single-rate policer.
two-rate—If the named tricolor policer is a two-rate
policer.
Copyright © 2010, Juniper Networks, Inc.