Configuring Firewall Filters (J-Web Procedure) - Juniper JUNOS OS 10.3 - SOFTWARE Manual

Complete Software Guide for Junos
Related
Documentation
3068
®
OS for EX Series Ethernet Switches, Release 10.3
[edit interfaces]
user@switch# set ge-0/1/0 description "filter to count and monitor employee-vlan
traffic applied on layer 3 interface"
NOTE: Providing the description is optional.
Specify the unit number, family address type, and address for the interface:
2.
[edit interfaces]
user@switch# set ge-0/1/0 unit 0 family inet address 10.10.10.1/24
For firewall filters applied to Layer 3 (routed) interfaces, the family address type must
be (for IPv4 traffic) or
inet
You can apply firewall filters to filter packets that are entering or exiting a Layer 3
3.
(routed) interface:
To apply a firewall filter to filter packets that are entering a Layer 3 interface:
[edit interfaces]
user@switch# set ge-0/1/0 unit 0 family inet address 10.10.10.1/24 filter input
ingress-router-filter
To apply a firewall filter to filter packets that are exiting a Layer 3 interface:
[edit interfaces]
user@switch# set ge-0/1/0 unit 0 family inet address 10.10.10.1/24 filter output
egress-router-filter
NOTE: You can apply no more than one firewall filter per Layer 3 interface,
per direction.
Configuring Firewall Filters (J-Web Procedure) on page 3069
Example: Configuring Firewall Filters for Port, VLAN, and Router Traffic on EX Series
Switches on page 3039
Example: Using Filter-Based Forwarding to Route Application Traffic to a Security
Device on EX Series Switches on page 3058
Verifying That Firewall Filters Are Operational on page 3083
Monitoring Firewall Filter Traffic on page 3084
Configuring Policers to Control Traffic Rates (CLI Procedure) on page 3073
Assigning Multifield Classifiers in Firewall Filters to Specify Packet-Forwarding Behavior
(CLI Procedure) on page 3075
Firewall Filter Match Conditions and Actions for EX Series Switches on page 3009
Firewall Filters for EX Series Switches Overview on page 3001
(for IPv6 traffic).
inet6
Copyright © 2010, Juniper Networks, Inc.