Configuring Prefix-Specific Actions (Nsm Procedure) - Juniper NETWORK AND SECURITY MANAGER 2010.3 - M-SERIES AND MX-SERIES DEVICES GUIDE REV1 Manual

Configuring Prefix-specific Actions (NSM Procedure)

Copyright © 2010, Juniper Networks, Inc.
Table 81: Firewall Filter Configuration Details (continued)
Task
Prefix-specific actions allow you to configure policers and counters for specific addresses
or ranges of addresses. This allows you to essentially create policers and counters on a
per-prefix level.
To configure the prefix-specific actions in NSM:
In the NSM navigation tree, select Device Manager > Devices.
1.
Click the Device Tree tab, and then double-click the device to select it.
2.
Click the Configuration tab. In the configuration tree, expand Firewall > Family >
3.
Inet.
Click Prefix Action.
4.
Add or modify settings as specified in Table 82 on page 168.
5.
Click one:
6.
OK—Saves the changes.
Cancel—Cancels the modifications.
Your Action
26. Click Accept next to Then.
Select Accept to accept a packet.
Select Discard to discard a packet silently, without sending
an ICMP message.
Select Next to evaluate the next term in the firewall filter.
Select Routing instance to specify a routing table to which
packets are forwarded.
Select IPsec Sa to specify an IP Security (IPsec) security
association (SA) for the packet.
Select Reject to discard a packet, and send an ICMP
destination unreachable message.
27. Click Policer next to Then.
28. Select one of the following:
Select Policer to configure a new policer for each filter and
select the policer name.
Select three-color-policer to configure a tricolor marking
policer,
a. Expand Three Color Policer.
b. Click Single Rate next to Three Color Policer.
c. Select one of the following:
single-rate—If the named tricolor policer is a
single-rate policer.
two-rate—If the named tricolor policer is a two-rate
policer.
Chapter 15: Configuring Firewall
167