Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual page 3403

Table 426: Advanced Options for Terms (continued)
Table Function
Precedence Specifies IP precedence.
NOTE: IP precedence and DSCP number cannot be specified together
for the same term.
IP Options Specifies the presence of the options field in the IP header.
Interface Specifies the interface on which the packet is received.
Ether type Specifies the Ethernet type field of a packet.
NOTE: This option is not applicable for a routing filter.
Dot 1q user Specifies the user-priority field of the tagged Ethernet packet.
priority User-priority values can be 0–7.
In place of the numeric value, you can specify one of the following text
synonyms (the field values are also listed)
background (1)—Background
best-effort (0)—Best effort
controlled-load (4)—Controlled load
excellent-load (3)—Excellent load
network-control (7)—Network control reserved traffic
standard (2)—Standard or Spare
video (5)—Video
voice (6)—Voice
NOTE: This option is not applicable for a routing filter.
VLAN Specifies the VLAN to be associated with the packet.
NOTE: This option is not applicable for a routing filter.
TCP Flags Specifies one or more TCP flags.
NOTE: TCP flags are supported on ingress ports, VLANs, and router
interfaces.
Fragmentation Specifies the IP fragmentation flags.
Flags
NOTE: Fragmentation flags are supported on ingress ports, VLANs,
and router interfaces.
Dot1q tag Specifies the value for tag field in the Ethernet header. Values can be
from 1 through 4095.
NOTE: This option is not applicable for a routing filter.
Action
Copyright © 2010, Juniper Networks, Inc.
Chapter 108: Configuring Firewall Filters
Your Action
Select the option from the list.
Select the option from the list.
Select the interface from the list.
Select a value from the list.
Select a value from the list.
Select the VLAN from the list.
Select the option
TCP Initial
enter a combination of TCP
flags.
Select either the option
or enter a
is-fragment
combination of fragment action
flags.
Enter the value.
or
3299