Firewall Filters For Ex Series Switches Overview; Firewall Filters—Overview - Juniper JUNOS OS 10.3 - SOFTWARE Manual

CHAPTER 100
Firewall Filters—Overview

Firewall Filters for EX Series Switches Overview

Copyright © 2010, Juniper Networks, Inc.
Firewall Filters for EX Series Switches Overview on page 3001
Understanding Planning of Firewall Filters on page 3005
Understanding Firewall Filter Processing Points for Bridged and Routed Packets on EX
Series Switches on page 3007
Understanding How Firewall Filters Control Packet Flows on page 3008
Firewall Filter Match Conditions and Actions for EX Series Switches on page 3009
Understanding How Firewall Filters Are Evaluated on page 3030
Understanding Firewall Filter Match Conditions on page 3032
Understanding How Firewall Filters Test a Packet's Protocol on page 3036
Understanding the Use of Policers in Firewall Filters on page 3036
Understanding Filter-Based Forwarding for EX Series Switches on page 3037
Firewall filters provide rules that define whether to permit, deny, or forward packets that
are transiting an interface on a Juniper Networks EX Series Ethernet Switch from a source
address to a destination address. You configure firewall filters to determine whether to
permit, deny, or forward traffic before it enters or exits a port, VLAN, or Layer 3 (routed)
interface to which the firewall filter is applied. An ingress firewall filter is a filter that is
applied to packets that are entering a network. An egress firewall filter is a filter that is
applied to packets that are exiting a network. You can configure firewall filters to subject
packets to filtering, class-of-service (CoS) marking (grouping similar types of traffic
together, and treating each type of traffic as a class with its own level of service priority),
and traffic policing (controlling the maximum rate of traffic sent or received on an
interface).
This topic describes:
Firewall Filter Types on page 3002
Firewall Filter Components on page 3003
Firewall Filter Processing on page 3003
3001