Juniper JUNOS 10.1 - CONFIGURATION GUIDE 1-2010 Configuration Manual page 283

Example: Applying a Filter to an Interface
For M Series and T Series routers only, apply an input filter to VPLS traffic. Output
Input Filter for VPLS
filters do not work for broadcast and multicast traffic, including VPLS traffic.
Traffic
The following example illustrates the configuration of filter-based forwarding at the
Filter-Based Forwarding
output interface. In this example, the packet flow follows this path:
at the Output Interface
1.
2.
3.
4.
Chapter 5: Configuring Protocol Family and Interface Address Properties
[edit interfaces]
fe-2/2/3 {
vlan-tagging;
encapsulation vlan-vpls;
unit 601 {
encapsulation vlan-vpls;
vlan-id 601;
family vpls {
filter {
input filter1; # Works for multicast destination MAC address
output filter1; # Does not work for multicast destination MAC address
}
}
}
}
[edit firewall]
family vpls {
filter filter1 {
term 1 {
from {
destination-mac-address {
01:00:0c:cc:cc:cd/48;
}
}
then {
discard;
}
}
term 2 {
then {
accept;
}
}
}
}
A packet arrives at interface
and
10.50.200.1 10.50.100.1
The route lookup in routing table
The output filter installed at
.
fbf.inet.0
The packet matches the entry
leaves the router from interface
with source and destination addresses
fe-1/2/0.0
respectively.
points to the egress interface
inet.0
so-0/0/3.0 redirects the packet to routing table
10.50.100.0/25 in the fbf.inet.0
.
so-2/0/0.0
Applying a Filter to an Interface
.
so-0/0/3.0
table, and finally
213