Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 3345

Table 416: Supported Match Conditions Applicable to IPv4 Traffic for Firewall Filters on EX
Series Switches (continued)
Match Condition Description
Source MAC address.
source-mac-address
mac-address
You can define a source MAC address with
a prefix, such as from
destination-mac-address
00:01:02:03:04:05/24. If no prefix is
specified, the default value 48 is used.
TCP or UDP
source-port number
specify this match in conjunction with the
protocol
which protocol is being used on the port. In
place of the numeric field, you can specify
one of the text synonyms listed under
destination-port
IP source prefix list field.
source-prefix-list
prefix-list
You can define a list of IP address prefixes
under a prefix-list alias for frequent use. You
make this definition at the
policy-options]
TCP packets of an established TCP
tcp-established
connection. This condition matches packets
other than the first packet of a connection.
tcp-established
names
tcp-established
whether the protocol is TCP. To do so,
specify the
Copyright © 2010, Juniper Networks, Inc.
field. Typically, you
source-port
match statement to determine
.
[edit
hierarchy level.
is a synonym for the bit
.
"(ack | rst)"
does not implicitly check
match condition.
protocol tcp
Chapter 106: Firewall Filters—Overview
Supported Platforms and Bind Points
Ingress Egress
EX2200—ports and
VLANs
EX3200 and
EX4200—ports and
VLANs
EX4500—ports and
VLANs
EX8200—ports and
VLANs
EX2200—ports, VLANs,
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—ports, VLANs,
and Layer 3 interfaces
EX8200—ports, VLANs,
and Layer 3 interfaces
EX2200—ports, VLANs,
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—ports, VLANs,
and Layer 3 interfaces
EX8200—ports, VLANs,
and Layer 3 interfaces
EX2200—ports, VLANs,
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—ports, VLANs,
and Layer 3 interfaces
EX8200—ports, VLANs,
and Layer 3 interfaces
EX2200—ports and
VLANs
EX3200 and
EX4200—ports and
VLANs
EX4500—ports and
VLANs
EX8200—ports and
VLANs
EX2200—ports, VLANs,
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—ports, VLANs,
and Layer 3 interfaces
EX8200—ports, VLANs,
and Layer 3 interfaces
EX2200—ports, VLANs,
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX4500—ports, VLANs,
and Layer 3 interfaces
EX8200—ports, VLANs,
and Layer 3 interfaces
EX2200—not
supported
EX3200 and
EX4200—not
supported
EX4500—not
supported
EX8200—not
supported
3241