Restrictions on Applying Firewall Filters
Copyright © 2017, Juniper Networks, Inc.
input-list [ filter-names ];
output filter-name;
output-list [ filter-names ];
}
}
}
}
All Other Firewall Filters on Logical Interfaces
To apply a standard firewall filter to a logical interface for all cases other than a
protocol-independent filter on an MX Series router, configure the
the protocol family:
interfaces {
interface-name {
unit logical-unit-number {
family family-name {
...
filter {
group group-number;
input filter-name;
input-list [ filter-names ];
output filter-name;
output-list [ filter-names ];
}
}
}
}
}
Number of Input and Output Filters Per Logical Interface on page 1051
MPLS and Layer 2 CCC Firewall Filters in Lists on page 1052
Layer 2 CCC Firewall Filters on MX Series Routers and EX Series Switches on page 1052
Number of Input and Output Filters Per Logical Interface
Input filters—Although you can use the same filter multiple times, you can apply only
one input filter or one input filter list to an interface.
To specify a single firewall filter to be used to evaluate packets received on the interface,
include the
input filter-name
To specify an ordered list of firewall filters to be used to evaluate packets received on
the interface, include the
can specify up to 16 firewall filters for the filter input list.
Output filters—Although you can use the same filter multiple times, you can apply only
one output filter or one output filter list to an interface.
To specify a single firewall filter to be used to evaluate packets transmitted on the
interface, include the
output filter-name
statement in the
stanza.
filter
input-list [ filter-names ]
statement in the
statement in the
Chapter 32: Configuring Firewall Filters
statement under
filter
filter
stanza. You
stanza.
filter
1051