Guidelines For Configuring Firewall Filters; Statement Hierarchy For Configuring Firewall Filters - Juniper ACX1000 Configuration Manual

ACX Series Universal Access Router Configuration Guide
Related
Documentation

Guidelines for Configuring Firewall Filters

Statement Hierarchy for Configuring Firewall Filters

1044
RFC 2597, Assured Forwarding PHB Group
RFC 3246, An Expedited Forwarding PHB (Per-Hop Behavior)
RFC 4291, IP Version 6 Addressing Architecture
RFC 4443, Internet Control Message Protocol (ICMPv6) for the Internet Protocol Version
6 (IPv6) Specification
NOTE: ACX Series routers do not support RFC 2460, RFC 4291, and RFC 4443
standards.
Firewall Filters Overview
Service Filter Overview
Simple Filter Overview
Firewall Filters in Logical Systems Overview
This topic covers the following information:
Statement Hierarchy for Configuring Firewall Filters on page 1044
Firewall Filter Protocol Families on page 1045
Firewall Filter Names and Options on page 1046
Firewall Filter Terms on page 1046
Firewall Filter Match Conditions on page 1046
Firewall Filter Actions on page 1048
To configure a standard firewall filter, you can include the following statements. For an
IPv4 standard firewall filter, the
firewall filter, the
family inet6
firewall {
family family-name {
filter filter-name {
accounting-profile name;
instance-shared;
interface-specific;
physical-interface-filter;
term term-name {
filter filter-name;
}
term term-name {
from {
match-conditions;
ip-version ip-version {
statement is optional. For an IPv6 standard
family inet
statement is mandatory.
Copyright © 2017, Juniper Networks, Inc.