Juniper J-Series Administration Manual page 282

J-series Services Router Administration Guide
1.
2.
3.
4.
Table 136: Configuring a Firewall Filter for Packet Capture
Task
Navigate to the Firewall level in the
configuration hierarchy.
Define a firewall filter
dest-all
filter term—for example,
dest-term —to capture packets with a
particular destination address—for
example, .
192.168.1.1/32
Navigate to the Interfaces level in
the configuration hierarchy.
Apply the filter to all the
dest-all
outgoing packets on the
interface—for example, fe-0/0/1.0
(See the interface naming
conventions in the J-series Services
Router Basic LAN and WAN Access
Configuration Guide.)
260
Configuring Packet Capture with a Configuration Editor
Navigate to the top of the configuration hierarchy in either the J-Web or CLI
configuration editor.
Perform the configuration tasks described in Table 136 on page 260.
If you are finished configuring the router, commit the configuration.
To check the configuration, see "Verifying Packet Capture" on page 263.
J-Web Configuration Editor
1. In the J-Web interface, select
Configuration>View and Edit>Edit
Configuration.
2. Next to Firewall, click Configure or
Edit.
and a 1. Next to Filter, click Add new entry.
2.
In the filter name box, type
3. Next to Term, click Add new entry.
4.
In the Rule name box, type
5. Next to From, click Configure.
6. Next to Destination address, click
Add new entry.
7. In the Address box, type
192.168.1.1/32
8. Click OK until you return to the
Configuration page.
In the configuration editor hierarchy,
select Interfaces.
1. In the Interface name box, click
fe-0/0/1.
.
2. In the Interface unit number box,
click 0.
3. Next to Inet, select Yes, and click
Edit.
4. Next to Filter, click Configure.
5.
In the Output box, type
6. Click OK until you return to the
Interfaces page.
CLI Configuration Editor
From the
edit firewall
Set the filter and term name, and define
the match condition and its action.
dest-all .
set firewall filter dest-all term dest-term from
destination-address 192.168.1.1/32
dest-term .
set firewall filter dest-all term dest-term then
sample accept
.
Enter
set interfaces fe-0/0/1 unit 0 family inet
filter output dest-all
dest-all .
hierarchy level, enter
[edit]