Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 3380

Complete Software Guide for Junos
Configuring a Router Firewall Filter to Give Priority to Egress Traffic Destined for the Corporate
Subnet
CLI Quick
Configuration
Step-by-Step
Procedure
3276
®
OS for EX Series Ethernet Switches, Release 10.4
then {
accept;
}
}
}
}
}
vlans {
guest-vlan {
description "restrict guest-to-employee traffic and peer-to-peer applications on
guest VLAN";
filter {
input ingress-vlan-limit-guest;
}
}
}
To configure and apply firewall filters for port, VLAN, and router interfaces, perform these
tasks:
To quickly configure a firewall filter for a routed port (Layer 3 uplink module) to filter
traffic, giving highest forwarding-class priority to traffic destined for the
employee-vlan
corporate subnet, copy the following commands and paste them into the switch terminal
window:
[edit]
set firewall family inet filter egress-router-corp-class term corp-expedite from destination-address
192.0.2.16/28
set firewall family inet filter egress-router-corp-class term corp-expedite then forwarding-class
expedited-forwarding
set firewall family inet filter egress-router-corp-class term corp-expedite then loss-priority low
set firewall family inet filter egress-router-corp-class term not-to-corp then accept
set interfaces ge-0/1/0 description "filter at egress router to expedite destined for corporate
network"
set ge-0/1/0 unit 0 family inet address 103.104.105.1
set interfaces ge-0/1/0 unit 0 family inet filter output egress-router-corp-class
To configure and apply a firewall filter to a routed port (Layer 3 uplink module) to give
highest priority to
employee-vlan
Define the firewall filter
1.
[edit]
user@switch# set firewall family inet filter egress-router-corp-class
Define the term corp-expedite
2.
[edit firewall]
user@switch# set family inet filter egress-router-corp-class term corp-expedite from
destination-address 192.0.2.16/28
user@switch# set family inet filter egress-router-corp-class term corp-expedite then
forwarding-class expedited-forwarding
user@switch# set family inet filter egress-router-corp-class term corp-expedite then
loss-priority low
traffic destined for the corporate subnet:
:
egress-router-corp-class
:
Copyright © 2010, Juniper Networks, Inc.