Table 418: Actions For Firewall Filters - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

Complete Software Guide for Junos
Table 417: Supported Match Conditions Applicable to IPv6 Traffic for Firewall Filters on EX
Series Switches (continued)
Match Condition Description
Differentiated Services code point (DSCP).
traffic-class number
The DiffServ protocol uses the
type-of-service (ToS) byte in the IP header.
The most significant six bits of this byte form
the DSCP.
You can specify DSCP in hexadecimal,
binary, or decimal form.
In place of the numeric value, you can
specify one of the following text synonyms
(the field values are also listed):
ef (46)
Expedited Forwarding PHB.
af11 (10)
af21 (18)
af31 (26)
af41 (34)
These four classes, with three drop
precedences in each class, for a total of
12 code points, are defined in
Assured Forwarding PHB.
The VLAN that is associated with the packet.
vlan (vlan-id |
vlan-name)

Table 418: Actions for Firewall Filters

Action
accept
3250
®
OS for EX Series Ethernet Switches, Release 10.4
RFC 2598
—as defined in
, , ;
af12 (12) af13 (14)
, , ;
af22 (20) af23 (22)
, , ;
af32 (28) af33 (30)
, ,
af42 (36) af43 (38)
RFC 2597
When you define one or more terms that specify the filtering criteria, you also define the
action to take if the packet matches all criteria.
Description
Accept a packet.
Supported Platforms and Bind Points
Ingress
EX2200—not
supported
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX8200—Layer 3
interfaces
, An
,
EX2200—ports and
VLANs
EX3200 and
EX4200—ports and
VLANs
EX8200—ports and
VLANs
Supported Platforms and Direction
EX2200—ingress and egress
EX3200 and EX4200—ingress and
egress
EX4500—ingress and egress
EX8200—ingress and egress
Egress
EX2200—not
supported
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
EX8200—Layer 3
interfaces
EX2200—ports and
VLANs
EX3200 and
EX4200—ports and
VLANs
EX8200—ports and
VLANs
Copyright © 2010, Juniper Networks, Inc.