Table 379: Supported Match Conditions Applicable to IPv4 Traffic for Firewall Filters on EX
Series Switches (continued)
Match Condition
Description
ICMP packet type field. Typically, you specify
icmp-type number
this match in conjunction with the
match statement to determine which
protocol is being used on the port. In place
of the numeric value, you can specify one of
the following text synonyms (the field values
are also listed):
echo-reply (0)
(16)
mask-request (17)
parameter-problem (12)
redirect (5)
router-solicit (10)
time-exceeded (11)
timestamp-reply (14)
Interface on which the packet is received.
interface
You can specify the wildcard character (
interface-name
as part of an interface name.
Presence of the options field in the IP
ip-options
header.
is-fragment
If the packet is a trailing fragment, this
match condition does not match the first
fragment of a fragmented packet. Use two
terms to match both first and trailing
fragments.
Copyright © 2010, Juniper Networks, Inc.
,
,
echo-request (8)
info-reply
,
info-request (15)
,
,
mask-reply (18)
,
,
router-advertisement (9)
,
source-quench (4)
,
timestamp (13)
,
unreachable (3)
Supported Platforms and Bind Points
Ingress
EX2200—ports, VLANs,
protocol
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—ports, VLANs,
and Layer 3 interfaces
EX8200—ports, VLANs,
and Layer 3 interfaces
,
,
,
,
EX2200—ports, VLANs,
*
)
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—ports, VLANs,
and Layer 3 interfaces
EX8200—ports, VLANs,
and Layer 3 interfaces
EX2200—Layer 3
interfaces
EX3200 and
EX4200—Layer 3
interfaces
EX4500—Layer 3
interfaces
EX8200—Layer 3
interfaces
EX2200—ports, VLANs,
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—ports, VLANs,
and Layer 3 interfaces
EX8200—ports, VLANs,
and Layer 3 interfaces
Chapter 100: Firewall Filters—Overview
Egress
EX2200—ports, VLANs,
and Layer 3 interfaces
EX4500—ports, VLANs,
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX8200—ports, VLANs,
and Layer 3 interfaces
EX2200—ports, VLANs,
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—ports, VLANs,
and Layer 3 interfaces
EX8200—ports, VLANs,
and Layer 3 interfaces
EX2200—not
supported
EX3200 and
EX4200—not
supported
EX4500—not
supported
EX8200—not
supported
EX2200—not
supported
EX3200 and
EX4200—not
supported
EX4500—not
supported
EX8200—not
supported
3015