Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 3353

Table 417: Supported Match Conditions Applicable to IPv6 Traffic for Firewall Filters on EX
Series Switches (continued)
Match Condition Description
TCP or UDP
source-port number
specify this match in conjunction with the
next-header
which next-header is being used on the port.
In place of the numeric field, you can specify
one of the text synonyms listed under
destination-port
source-prefix-list IP source prefix list field.
prefix-list
You can define a list of IP address prefixes
under a prefix-list alias for frequent use. You
make this definition at the
policy-options]
One or more TCP flags:
tcp-flags (flags
tcp-initial)
bit-name—
logical operators—
(logical OR),
numerical value—0x01 through 0x20
text synonym—
To specify multiple flags, use logical
operators.
Match the first TCP packet of a connection.
tcp-initial
tcp-initial
"(syn & !ack)"
tcp-initial
the protocol is TCP. To do so, specify the
protocol tcp
Copyright © 2010, Juniper Networks, Inc.
field. Typically, you
source-port
match statement to determine
.
[edit
hierarchy level.
, , , , ,
fin syn rst push ack urgent
& (logical AND), |
! (negation)
tcp-initial
is a synonym for the bit names
.
does not implicitly check whether
match condition.
Chapter 106: Firewall Filters—Overview
Supported Platforms and Bind Points
Ingress Egress
EX2200—Layer 3
interfaces
EX3200 and
EX4200—Layer 3
interfaces
EX8200—Layer 3
interfaces
EX2200—Layer 3
interfaces
EX3200 and
EX4200—Layer 3
interfaces
EX8200—Layer 3
interfaces
EX2200—ports, VLANs,
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX8200—Layer 3
interfaces
EX2200—ports, VLANs,
and Layer 3 interfaces
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX8200—Layer 3
interfaces
EX2200—Layer 3
interfaces
EX3200 and
EX4200—Layer 3
interfaces
EX8200—Layer 3
interfaces
EX2200—Layer 3
interfaces
EX3200 and
EX4200—Layer 3
interfaces
EX8200—Layer 3
interfaces
EX2200—not
supported
EX3200 and
EX4200—not
supported
EX8200—not
supported
EX2200—not
supported
EX3200 and
EX4200—not
supported
EX8200—not
supported
3249