Chapter 101 Examples Of Firewall Filters Configuration; Series Switches - Juniper JUNOS OS 10.3 - SOFTWARE Manual

CHAPTER 101
Examples of Firewall Filters Configuration
Example: Configuring Firewall Filters for Port, VLAN, and Router Traffic on EX Series
Switches
Requirements
Copyright © 2010, Juniper Networks, Inc.
Example: Configuring Firewall Filters for Port, VLAN, and Router Traffic on EX Series
Switches on page 3039
Example: Using Filter-Based Forwarding to Route Application Traffic to a Security
Device on EX Series Switches on page 3058
This example shows how to configure and apply firewall filters to control traffic that is
entering or exiting a port on the switch, a VLAN on the network, and a Layer 3 interface
on the switch. Firewall filters define the rules that determine whether to forward or deny
packets at specific processing points in the packet flow.
Requirements on page 3039
Overview on page 3040
Configuring an Ingress Port Firewall Filter to Prioritize Voice Traffic and Rate-Limit TCP
and ICMP Traffic on page 3043
Configuring a VLAN Ingress Firewall Filter to Prevent Rogue Devices from Disrupting
VoIP Traffic on page 3048
Configuring a VLAN Firewall Filter to Count, Monitor, and Analyze Egress Traffic on the
Employee VLAN on page 3050
Configuring a VLAN Firewall Filter to Restrict Guest-to-Employee Traffic and
Peer-to-Peer Applications on the Guest VLAN on page 3052
Configuring a Router Firewall Filter to Give Priority to Egress Traffic Destined for the
Corporate Subnet on page 3054
Verification on page 3056
This example uses the following software and hardware components:
Junos OS Release 9.0 or later for EX Series switches.
Two Juniper Networks EX3200-48T switches: one to be used as an access switch, the
other to be used as a distribution switch
3039