Applying A Firewall Filter To A Port On A Switch; Configuring Firewall Filters - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

CHAPTER 108

Configuring Firewall Filters

Configuring Firewall Filters (CLI Procedure)
Configuring a Firewall Filter
Copyright © 2010, Juniper Networks, Inc.
Configuring Firewall Filters (CLI Procedure) on page 3289
Configuring Firewall Filters (J-Web Procedure) on page 3296
Configuring Policers to Control Traffic Rates (CLI Procedure) on page 3300
Assigning Multifield Classifiers in Firewall Filters to Specify Packet-Forwarding Behavior
(CLI Procedure) on page 3303
Configuring Routing Policies (J-Web Procedure) on page 3304
You configure firewall filters on EX Series switches to control traffic that enters ports on
the switch or enters and exits VLANs on the network and Layer 3 (routed) interfaces. To
configure a firewall filter you must configure the filter and then apply it to a port, VLAN,
or Layer 3 interface.
This topic describes:
Configuring a Firewall Filter on page 3289
Applying a Firewall Filter to a Port on a Switch on page 3292
Applying a Firewall Filter to a Management Interface on a Switch on page 3293
Applying a Firewall Filter to a VLAN on a Network on page 3294
Applying a Firewall Filter to a Layer 3 (Routed) Interface on page 3295
Before you can apply a firewall filter to a port, VLAN, or Layer 3 interface, you must
configure a firewall filter with the required details, such as type of family for the firewall
filter, firewall filter name, and match conditions. A match condition in the firewall filter
configuration can contain multiple terms that define the criteria for the match condition.
For each term, you must specify an action to be performed if a packet matches the
conditions in the term. For information on different match conditions and actions, see
"Firewall Filter Match Conditions and Actions for EX Series Switches" on page 3233.
To configure a firewall filter:
3289