Table 381: Actions For Firewall Filters - Juniper JUNOS OS 10.3 - SOFTWARE Manual

Table 380: Supported Match Conditions Applicable to IPv6 Traffic for Firewall Filters on EX
Series Switches (continued)
Match Condition Description
Differentiated Services code point (DSCP).
traffic-class number
The DiffServ protocol uses the
type-of-service (ToS) byte in the IP header.
The most significant six bits of this byte form
the DSCP.
You can specify DSCP in hexadecimal,
binary, or decimal form.
In place of the numeric value, you can
specify one of the following text synonyms
(the field values are also listed):
ef (46)
Expedited Forwarding PHB.
af11 (10)
af21 (18)
af31 (26)
af41 (34)
These four classes, with three drop
precedences in each class, for a total of
12 code points, are defined in
Assured Forwarding PHB.
The VLAN that is associated with the packet.
vlan (vlan-id |
vlan-name)

Table 381: Actions for Firewall Filters

Action
accept
Copyright © 2010, Juniper Networks, Inc.
RFC 2598
—as defined in
, , ;
af12 (12) af13 (14)
, , ;
af22 (20) af23 (22)
, ,
af32 (28) af33 (30)
, ,
af42 (36) af43 (38)
RFC 2597
When you define one or more terms that specify the filtering criteria, you also define the
action to take if the packet matches all criteria.
Description
Accept a packet.
Supported Platforms and Bind Points
Ingress
EX2200—not
supported
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—not
supported
EX8200—Layer 3
interfaces
, An
;
,
EX2200—ports and
VLANs
EX3200 and
EX4200—ports and
VLANs
EX4500—ports and
VLANs
EX8200—ports and
VLANs
Supported Platforms and Direction
Chapter 100: Firewall Filters—Overview
Egress
EX2200—not
supported
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—not
supported
EX8200—Layer 3
interfaces
EX2200—ports and
VLANs
EX3200 and
EX4200—ports and
VLANs
EX4500—ports and
VLANs
EX8200—ports and
VLANs
EX2200—ingress and egress
EX3200 and EX4200—ingress and
egress
EX4500—ingress and egress
EX8200—ingress and egress
3027