Juniper EX9200 Series Overview Manual page 48

Class of Service Overview and Examples for EX9200 Switches
Common IP Firewall Actions
Common IPv4 Firewall Actions
34
The common firewall actions are as follows:
count counter-name;
forwarding-class class-name;
loss-priority (high | low | medium-high | medium-low);
next term;
policer policer-name;
three-color-policer policer-name {
(single-rate single-rate-policer-name | two-rate two-rate-policer-name);
}
This section lists statements that are valid at the following hierarchy levels, and is
referenced at those levels in
the statements being repeated.
[edit firewall family inet filter filter-name term term-name then]
[edit firewall family inet6 filter filter-name term term-name then]
[edit firewall filter filter-name term term-name then]
The common IP firewall actions are as follows:
log;
logical-system logical-system-name <routing-instance routing-instance-name>
<topology topology-name>;
port-mirror;
port-mirror-instance instance-name;
routing-instance routing-instance-name> <topology topology-name>;
sample;
service-filter-hit;
syslog;
topology topology-name;
This section lists statements that are valid at the following hierarchy levels, and is
referenced at those levels in
the statements being repeated.
[edit firewall family inet filter filter-name term term-name then]
[edit firewall filter filter-name term term-name then]
The common IP version 4 (IPv4) firewall actions are as follows:
(accept | discard <accounting collector-name> | reject <administratively-prohibited |
bad-host-tos | bad-network-tos | fragmentation-needed | host-prohibited |
host-unknown | host-unreachable | network-prohibited | network-unknown |
network-unreachable | port-unreachable | precedence-cutoff | precedence-violation |
protocol-unreachable | source-host-isolated | source-route-failed | tcp-reset>);
ipsec-sa sa-name;
load-balance sa-name;
next-hop-group group-name;
prefix-action action-name;
"Complete [edit firewall] Hierarchy" on page 38
"Complete [edit firewall] Hierarchy" on page 38
instead of
instead of
Copyright © 2013, Juniper Networks, Inc.