Understanding Filter-Based Forwarding For Ex Series Switches - Juniper JUNOS OS 10.3 - SOFTWARE Manual

Related
Documentation

Understanding Filter-Based Forwarding for EX Series Switches

Related
Documentation
Copyright © 2010, Juniper Networks, Inc.
Policing uses an algorithm to enforce a limit on average bandwidth while allowing bursts
up to a specified maximum value. You can define specific classes of traffic on an interface
and apply a set of rate limits to each class. After you name and configure a policer, it is
stored as a template. You can then use a policer in a firewall filter configuration.
Each policer that you configure includes an implicit counter that counts the number of
packets that exceed the rate limits that are specified for the policer. To get filter or
term-specific packets counts, you must configure a new policer for each filter or term
that requires policing.
Firewall Filters for EX Series Switches Overview on page 3001
Example: Configuring Firewall Filters for Port, VLAN, and Router Traffic on EX Series
Switches on page 3039
Firewall Filter Match Conditions and Actions for EX Series Switches on page 3009
Administrators of Juniper Networks EX Series Ethernet Switches can use firewall filters
in conjunction with virtual routing instances to specify different routes for packets to
travel in their networks. To set up this feature, which is called filter-based forwarding,
you specify a filter and match criteria and then specify the virtual routing instance to send
packets to.
You might want to use filter-based forwarding to route specific types of traffic through
a firewall or security device before the traffic continues on its path. You can also use
filter-based forwarding to give certain types of traffic preferential treatment or to improve
load balancing of switch traffic.
Understanding Virtual Routing Instances on EX Series Switches on page 1290
Firewall Filters for EX Series Switches Overview on page 3001
Example: Using Filter-Based Forwarding to Route Application Traffic to a Security
Device on EX Series Switches on page 3058
Chapter 100: Firewall Filters—Overview
3037