Series Routers - Juniper ACX1000 Configuration Manual

Table 81: Firewall Filter Match Conditions for VPLS Traffic (continued)
Match Condition
number
ipv6-traffic-class
ipv6-traffic-class-except
number
learn-vlan-1p-priority number
learn-vlan-1p-priority-except
number
learn-vlan-dei
learn-vlan-dei-excep t
learn-vlan-id number
learn-vlan-id-except number
Copyright © 2017, Juniper Networks, Inc.
Description
(MX Series only) Differentiated Services code point (DSCP). The DiffServ protocol uses the
type-of-service (ToS) byte in the IP header. The most significant 6 bits of this byte form the
DSCP. For more information, see
Trusted Traffic" on page 950.
You can specify a numeric value from
include as a prefix. To specify the value in binary form, include
0x
In place of the numeric value, you can specify one of the following text synonyms (the field values
are also listed):
RFC 3246, An Expedited Forwarding PHB (Per-Hop Behavior), defines one code point:
RFC 2597, Assured Forwarding PHB Group, defines 4 classes, with 3 drop precedences in each
class, for a total of 12 code points:
(10), (12), (14),
af11 af12 af13
(18), (20), (22),
af21 af22 af23
af31 (26), af32 (28), af33 (30),
(34), (36), (38)
af41 af42 af43
Do not match the DSCP
number
(MX Series routers, M320 router, and EX Series switches only) Match on the IEEE 802.1p learned
VLAN priority bits in the provider VLAN tag (the only tag in a single-tag frame with 802.1Q VLAN
tags or the outer tag in a dual-tag frame with 802.1Q VLAN tags). Specify a single value or multiple
values from 0 through 7 .
Compare with the
user-vlan-1p-priority
NOTE: This match condition supports the presence of a control word for MX Series routers and
the M320 router.
(MX Series routers, M320 router, and EX Series switches only) Do not match on the IEEE 802.1p
learned VLAN priority bits. For details, see the
NOTE: This match condition supports the presence of a control word for MX Series routers and
the M320 router.
(MX Series routers and EX Series switches only) Match the user VLAN ID drop eligability indicator
(DEI) bit.
(MX Series routers and EX Series switches only) Do not match the user VLAN ID DEI bit.
(MX Series routers and EX Series switches only) VLAN identifier used for MAC learning.
(MX Series routers and EX Series switches only) Do not match on the VLAN identifier used for
MAC learning.
Chapter 32: Configuring Firewall Filters
"Understanding How Behavior Aggregate Classifiers Prioritize
through . To specify the value in hexadecimal form,
0 63
.
match condition.
learn-vlan-1p-priority
as a prefix.
b
(46).
ef
match condition.
1077