Routers - Juniper ACX1000 Configuration Manual

ACX Series Universal Access Router Configuration Guide
Related
Documentation
Standard Firewall Filter Match Conditions for MPLS Traffic on ACX Series Routers
1062
NOTE: If you specify an IPv6 address in a match condition (the
destination-address
text representations described in RFC 4291, IP Version 6 Addressing
Architecture. For more information about IPv6 addresses, see
on page 530 and Supported IPv6 Standards.
The following is a sample firewall family inet6 configuration:
user@host# show firewall family inet6
filter ipv6-filter {
term t1 {
from {
}
then count ipv6-t1-count;
}
term t2 {
from {
}
then count ipv6-t2-count;
}
}
Guidelines for Configuring Firewall Filters on page 1044
Firewall Filter Terminating Actions
Firewall Filter Nonterminating Actions
On ACX Series routers, you can configure a standard stateless firewall filter with match
conditions for MPLS traffic (
NOTE: The
input-list filter-names
firewall filters for the
with the exception of management interfaces and internal Ethernet interfaces
( or ), loopback interfaces (
fxp em0
, or match conditions), use the syntax for
source-address
source-address {
2001:0000:0020:0020:0000:0000:0000:0150/128;
}
destination-address {
2001:0000:0040:0040:0000:0000:0000:0150/128;
}
next-header tcp;
source-port 1000;
destination-port 2000;
extension-header dstopts;
traffic-class ef;
tcp-flags 0x20;
hop-limit 254;
icmp-type neighbor-solicit;
).
family mpls
and
output-list filter-names
protocol family are supported on all interfaces
mpls
), and USB modem interfaces (
lo0
address
"IPv6 Overview"
statements for
Copyright © 2017, Juniper Networks, Inc.
,
).
umd