Chapter 107 Examples Of Firewall Filters Configuration; Series Switches - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

CHAPTER 107
Examples of Firewall Filters Configuration
Example: Configuring Firewall Filters for Port, VLAN, and Router Traffic on EX Series
Switches
Requirements
Copyright © 2010, Juniper Networks, Inc.
Example: Configuring Firewall Filters for Port, VLAN, and Router Traffic on EX Series
Switches on page 3261
Example: Using Filter-Based Forwarding to Route Application Traffic to a Security
Device on EX Series Switches on page 3280
Example: Configuring a Firewall Filter on a Management Interface on an EX Series
Switch on page 3284
This example shows how to configure and apply firewall filters to control traffic that is
entering or exiting a port on the switch, a VLAN on the network, and a Layer 3 interface
on the switch. Firewall filters define the rules that determine whether to forward or deny
packets at specific processing points in the packet flow.
Requirements on page 3261
Overview on page 3262
Configuring an Ingress Port Firewall Filter to Prioritize Voice Traffic and Rate-Limit TCP
and ICMP Traffic on page 3265
Configuring a VLAN Ingress Firewall Filter to Prevent Rogue Devices from Disrupting
VoIP Traffic on page 3270
Configuring a VLAN Firewall Filter to Count, Monitor, and Analyze Egress Traffic on the
Employee VLAN on page 3272
Configuring a VLAN Firewall Filter to Restrict Guest-to-Employee Traffic and
Peer-to-Peer Applications on the Guest VLAN on page 3274
Configuring a Router Firewall Filter to Give Priority to Egress Traffic Destined for the
Corporate Subnet on page 3276
Verification on page 3278
This example uses the following software and hardware components:
3261