Juniper NETWORK AND SECURITY MANAGER - NSM CONFIGURATION GUIDE FOR EX SERIES DEVICES REV 3 Configuration Manual page 60

Table 28: Create a New Term (continued)
ICMP Type
ICMP Code
Fragment Flags
TCP Flags
IP Precedence
Interface
Ether Type
dot1q-tag
44
Specifies the ICMP packet type field.
Typically, you specify this match in
conjunction with the protocol match to
determine which protocol is being used
on the port.
Specifies more specific information than
icmp-type. Because the value's meaning
depends upon the associated icmp-type,
you must specify icmp-type along with
icmp-code. The keywords are grouped
by the ICMP type with which they are
associated.
Specifies the IP fragmentation flags.
NOTE: Fragment flags is supported on
ingress ports, VLANs, and router
interfaces.
Specifies one or more TCP flags.
NOTE: TCP flags is supported on ingress
ports, VLANs, and router interfaces.
Specifies IP precedence. The options are:
assured forwarding, best-effort,
expedited-forwarding, network-control.
NOTE: IP precedence and DSCP number
cannot be specified together for the
same term.
Specifies the interface association.
Specifies the ethernet type field of a
packet.
NOTE: This option is not applicable for
a Routing filter.
Specifies the tag field in the Ethernet
header. Values can be from 1 through
4095.
NOTE: This option is not applicable for
a Routing filter.
Select the option from the list.
Select one:
Parameter-problem
Redirect
Time-exceeded
Unreachable
Select either the option is-fragement or
enter a combination of fragment flags.
Select either the option tcp-initial or
enter a combination of TCP flags.
Select the option from the list.
Select the interface from the list.
Select one:
Arp
Dot 1q
Enter the required number.
Copyright © 2010, Juniper Networks, Inc.