Firewall Filter Match Conditions For Vpls Traffic - Juniper ACX1000 Configuration Manual

ACX Series Universal Access Router Configuration Guide
Table 80: Bridge Family Firewall Filter Action Fields for ACX Series Routers
Action Field
accept
count
discard
forwarding-class
loss-priority
log
policer
syslog
three-color-policer
Related
Documentation

Firewall Filter Match Conditions for VPLS Traffic

1070
NOTE: Bridge family firewall filters can be applied as an output filter on Layer
2 interfaces. When the Layer 2 interface is on a bridge-domain configured
with the
vlan-id
the packet using the user vlan-id match specified in the bridge family firewall
filter.
show firewall
clear firewall
interface-specific (Firewall Filters)
In the from statement in the VPLS filter term, you specify conditions that the packet must
match for the action in the
statement must match for the action to be taken. The order in which you specify match
conditions is not important, because a packet must match all the conditions in a term
for a match to occur.
If you specify no match conditions in a term, that term matches all packets.
An individual condition in a
can specify numeric ranges. You can also specify multiple source addresses or destination
Description
Accept the packet
Count the packet in the named counter
Discard the packet
Classify packet to forwarding class
Packet's loss priority
Log the packet header information in a buffer within the Packet
Forwarding Engine. You can access this information by issuing
the show firewall log command at the command-line interface
(CLI).
Name of policer to use to rate-limit traffic
Log the packet to the system log file.
Police the packet using a three-colo-policer
statement, ACX series routers can match the outer-vlan of
statement to be taken. All conditions in the
then
statement can contain a list of values. For example, you
from
from
Copyright © 2017, Juniper Networks, Inc.