Dell PowerConnect J-EX4200-24T Software Manual page 2846

Dell PowerConnect J-Series Ethernet Switch Complete Software Guide for Junos OS
Overview and Topology
Configuration
CLI Quick
Configuration
Step-by-Step
Procedure
2774
One J-EX Series switch
In this example, traffic from one application server that is destined for a different
application server is matched by a firewall filter based on the IP address. Any matching
packets are routed to a particular virtual routing instance that first sends all traffic to a
security device, then forwards it to the designated destination address.
To configure filter-based forwarding:
To quickly create and configure filter-based forwarding, copy the following commands
and paste them into the switch terminal window:
[edit]
set interfaces ge-0/0/0 unit 0 family inet address 10.1.0.1/24
set interfaces ge-0/0/3 unit 0 family inet address 10.1.3.1/24
set firewall family inet filter fil term t1 from source-address 1.1.1.1/32
set firewall family inet filter fil term t1 from protocol tcp
set interfaces ge-0/0/0 unit 0 family inet filter input fil
set routing-instances vrf01 instance-type virtual-router
set routing-instances vrf01 interface ge-0/0/1.0
set routing-instances vrf01 interface ge-0/0/3.0
set routing-instances vrf01 routing-options static route 12.34.56.0/24 next-hop 10.1.3.254
set firewall family inet filter fil term t1 then routing-instance vrf01
To configure filter-based forwarding:
Create interfaces to the application servers:
1.
[edit]
user@switch# set interfaces ge-0/0/0 unit 0 family inet address 10.1.0.1/24
user@switch# set interfaces ge-0/0/3 unit 0 family inet address 10.1.3.1/24
Create a firewall filter that matches the correct source address:
2.
[edit]
user@switch# set firewall family inet filter fil term t1 from source-address 1.1.1.1/32
user@switch# set firewall family inet filter fil term t1 from protocol tcp
Associate the filter with the source application server's interface:
3.
[edit]
user@switch# set interfaces ge-0/0/0 unit 0 family inet filter input fil
Create a virtual router:
4.
[edit]
user@switch# set routing-instances vrf01 instance-type virtual-router
Associate the interfaces with the virtual router:
5.
[edit]
user@switch# set routing-instances vrf01 interface ge-0/0/1.0
user@switch# set routing-instances vrf01 interface ge-0/0/3.0
Configure the routing information for the virtual routing instance:
6.
[edit]