Juniper NETWORK AND SECURITY MANAGER 2010.4 - M-SERIES AND MX-SERIES DEVICES GUIDE REV 1 Manual page 217

Copyright © 2010, Juniper Networks, Inc.
Table 88: VPLS Firewall Filter Configuration Details (continued)
Task
Define a firewall filter
term.
Your Action
1. Click Term next to Accounting Profile.
2. Click Add new entry next to Term.
3. Expand Term.
4. In the Name box, enter the name that identifies the term.
5. In the Comment box, enter the comment for the term.
6. From the Filter list, select the name that identifies the filter.
7. Expand From.
8. In the Comment box, enter the comment.
9. From the listed protocol-independent match conditions, select
the filters defined for the VPLS family type.
The protocol-independent match conditions are Destination Mac
Address, Destination Port, Dscp, Ether Type, Forwarding Class,
Icmp Code, Icmp Type, Interface Group, Ip Adress, Ip Destination
Address, Ip Precedence, Ip Protocol, Ip Source Address, Learn
Vlan, 1p Priority, Learn Vlan id, Loss Priority, Port, Source Mac
Address, Source Port, Traffic Type, User Vlan 1p priority, User Vlan
id, Vlan Ether Type.
10. Expand Then.
11. In the Comment box, enter the comment for then.
12. In the Count box, enter the number of packets.
13. Select the Sample check box to sample the packet traffic.
14. From the Loss Priority list, set the packet loss priority (PLP) to
low, medium-low, medium-high, or high.
15. In the Forwarding Class box, enter the packet forwarding class
name.
16. Select the Port Mirror check box to configure port mirroring for
VPLS traffic.
17. Click Accept next to Then.
18. Select one of the following:
Accept—To accept a packet.
Discard—To discard a packet silently, without sending an ICMP
message.
Next—To evaluate the next term in the firewall filter.
19. Click Policer next to Then.
20. Select one of the following:
Policer—To configure a new policer for each filter and select
the policer name.
three-color-policer —To configure a tricolor marking policer,
a. Expand Three Color Policer.
b. Click Single Rate next to Three Color Policer.
c. Select one of the following:
single-rate—If the named tricolor policer is a single-rate
policer.
two-rate—If the named tricolor policer is a two-rate
policer.
Chapter 15: Configuring Firewall
181