Juniper ACX1000 Configuration Manual page 1114

ACX Series Universal Access Router Configuration Guide
Table 73: Standard Firewall Filter Match Conditions for IPv4 Traffic on ACX Series
Routers (continued)
Match Condition
icmp-type number
ip-options values
precedence
ip-precedence-field
protocol number
source-address address
source-port number
source-prefix-list
1056
Description
Match the ICMP message type field.
If you configure this match condition, we recommend that you also configure the
match condition in the same term.
In place of the numeric value, you can specify one of the following text synonyms (the field
values are also listed):
echo-reply
mask-request (17), mask-reply
router-advertisement (9), router-solicit
(13),
timestamp timestamp-reply
Match the 8-bit IP option field, if present, to the specified value.
ACX Series routers support only the
packets are sent to the Packet Forwarding Engine for processing.
NOTE: On ACX Series routers, you can specify only one IP option value. Configuring multiple
values is not supported.
Match the IP precedence field.
In place of the numeric field value, you can specify one of the following text synonyms (the
field values are also listed): critical-ecp
immediate (0x40), internet-control
You can specify precedence in hexadecimal, binary, or decimal form.
Match the IP protocol type field. In place of the numeric value, you can specify one of the
following text synonyms (the field values are also listed):
(44), (47),
fragment gre hop-by-hop
ipv6 (41), ospf (89), pim (103),
Match the IPv4 address of the source node sending the packet.
Match the UDP or TCP source port field.
If you configure this match condition for IPv4 traffic, we recommend that you also configure
the or
protocol udp protocol tcp
is being used on the port.
In place of the numeric value, you can specify one of the text synonyms listed with the
destination-port number match condition.
Match IP source prefixes in named list.
(0), (8),
echo-request info-reply
(18), parameter-problem (12),
(10), source-quench (4),
(14), or (3).
unreachable
match condition, which ensures that the
ip-options_any
(0xa0), flash (0x60),
(0xc0), net-control (0xe0),
(51),
ah
(0), (1), (58),
icmp icmp6
rsvp (46), sctp (132), tcp (6),
match statement in the same term to specify which protocol
protocol icmp
(16), (15),
info-request
redirect (5),
time-exceeded (11),
flash-override (0x80),
priority (0x20), or routine (0x00).
(60), (8), (50),
dstopts egp esp
(58), (2), (4),
icmpv6 igmp ipip
udp (17), or vrrp (112).
Copyright © 2017, Juniper Networks, Inc.