Switches; Table 429: Supported Options For Firewall Filter Statements - Juniper JUNOS OS 10.4 - FOR EX REV 1 Manual

Complete Software Guide for Junos
Firewall Filter Configuration Statements Supported by Junos OS for EX Series Switches

Table 429: Supported Options for Firewall Filter Statements

Statement and Option
family family-name {
}
filter filter-name {
}
interface-specific
term term-name {
}
from {
match-conditions;
}
then {
action;
action-modifiers;
}
policer policer-name {
}
3318
®
OS for EX Series Ethernet Switches, Release 10.4
Configuring Firewall Filters (CLI Procedure) on page 3289
Configuring Policers to Control Traffic Rates (CLI Procedure) on page 3300
Firewall Filters for EX Series Switches Overview on page 3225
You configure firewall filters to filter packets based on their components and to perform
an action on packets that match the filter.
Table 429 on page 3318 lists the options that are supported for the firewall statement in
Junos OS for EX Series switches.
Description
The option specifies the version or type of
family-name
addressing protocol:
—Filter packets based on protocol-independent match
any
conditions.
—Filter Layer 2 (Ethernet) packets and
ethernet-switching
Layer 3 (IP) packets
—Filter IPv4 packets
inet
—Filter IPv6 packets
inet6
The option identifies the filter. The name can
filter-name
contain letters, numbers, and hyphens (-) and can be up to 64
characters long. To include spaces in the name, enclose the
name in quotation marks (" " ).
The interface-specific statement configures unique names for
individual firewall counters specific to each interface.
The option identifies the term. The name can
term-name
contain letters, numbers, and hyphens (-) and can be up to 64
characters long. To include spaces in the name, enclose the
entire name in quotation marks (" " ). Each term name must
be unique within a filter.
The statement is optional. If you omit it, all packets are
from
considered to match.
For information about the
action
see "Firewall Filter Match Conditions and Actions for EX Series
Switches" on page 3233.
The policer-name option identifies the policer. The name can
contain letters, numbers, and hyphens (-) and can be up to 64
characters long. To include spaces in the name, enclose the
name in quotation marks (" " ).
Copyright © 2010, Juniper Networks, Inc.
and options,
action-modifiers