Table 346: Actions For Vsas - Juniper JUNOS OS 10.3 - SOFTWARE Manual

Table 345: Match Conditions (continued)
Option
source-dot1q-tag tag
destination-ip ip-address
ip-protocol protocol-id
source-port port
destination-port port

Table 346: Actions for VSAs

Option
( | )
allow deny
forwarding-class class-of-service
Copyright © 2010, Juniper Networks, Inc.
Description
Tag value in the dot1q header, in the range
Address of the final destination node.
IPv4 protocol value. In place of the numeric value, you can specify one of the
following text synonyms:
,
ah egp (8)
pim (103)
TCP or User Datagram Protocol (UDP) source port field. Normally, you specify
this match statement in conjunction with the
to determine which protocol is being used on the port. In place of the numeric
field, you can specify one of the text options listed under
TCP or UDP destination port field. Normally, you specify this match in
conjunction with the
is being used on the port. In place of the numeric value, you can specify one
of the following text synonyms (the port numbers are also listed):
afs (1483)
cmd (514)
finger (79)
(143)
krbupdate (760)
mobilip-mn (435)
netbios-ssn (139)
pptp (1723)
smtp (25)
sunrpc (111)
timed (525)
When you define one or more terms that specify the filtering criteria, you also define the
action to take if the packet matches all criteria. Table 346 on page 2627 shows the actions
that you can specify in a term.
Description
Accept a packet or discard a packet silently without sending an Internet Control
Message Protocol (ICMP) message.
(Optional) Classify the packet in one of the following forwarding classes:
assured-forwarding
best-effort
expedited-forwarding
network-control
, , ,
esp (50 gre (47) icmp (1)
, , , or
rsvp (46) tcp (6) udp (17)
ip-protocol match statement to determine which protocol
, bgp (179) , biff (512) , bootpc (68)
, , ,
dhcp (67) domain (53)
, , ,
ftp (21) ftp-data (20)
, ,
kerberos-sec (88) klogin (543)
, ,
kshell (544) ldap (389)
, ,
msdp (639) netbios-dgm (138)
, nfsd (2049) , nntp (119)
, printer (515) , radacct (1813)
, snmp (161) , snmptrap (162)
, ,
syslog (514) telnet (23)
, ,
who (513) xdmcp (177)
Chapter 83: Configuring Access Control
through .
0 4095
, , ,
igmp (2) ipip (4) ipv6 (41)
match statement
ip-protocol
destination-port
, bootps (67) , cvspserver (2401)
,
eklogin (2105) ekshell (2106)
, ,
http (80) https (443) ident (113)
, ,
kpasswd (761) krb-prop (754)
, ,
login (513) mobileip-agent (434)
,
netbios-ns (137)
, ntalk (518) , ntp (123)
, radius (1812) , rip (520) , rkinit (2108)
, snpp (444) , socks (1080)
, , ,
tacacs-ds (65) talk (517)
, ,
zephyr-clt (2103) zephyr-hm (2104)
, ,
ospf (89)
.
,
, ,
exec (512)
,
imap
,
,
,
, pop3 (110) ,
,
, ssh (22) ,
,
tftp (69)
2627