Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
Configuring Firewall Filters
• Example: Accepting OSPF Packets from Certain Addresses on page 248
• Example: Matching Packets Based on Two Unrelated Criteria on page 248
• Example: Counting Both Accepted and Rejected Packets on page 249
• Example: Blocking TCP Connections to a Certain Port Except from BGP Peers on page 250
• Example: Accepting Packets with Specific IPv6 TCP Flags on page 250
• Example: Setting a Rate Limit for Incoming Layer 2 Control Packets on page 251
• Configuring Service Filters on page 252
• Configuring Simple Filters on page 253
• Configuring Firewall Filters for Logical Systems on page 255
• Configuring Accounting for Firewall Filters on page 268
• Configuring Filter-Based Forwarding on page 269
• Configuring Forwarding Table Filters on page 271
• Configuring System Logging of Firewall Filter Operations on page 273
This section shows the complete set of statements that can be configured at the [edit
firewall] hierarchy level to create a firewall filter.
[edit firewall]
family family-name {
filter filter-name {
accounting-profile name;
interface-specific;
physical-interface-filter;
term term-name {
filter filter-name;
from {
match-conditions;
}
then {
action;
action-modifiers;
}
}
}
service-filter filter-name {
term term-name {
from {
match-conditions;
}
then {
action;
action-modifiers;
}
}
}
simple-filter filter-name {
term term-name {
192
Copyright © 2010, Juniper Networks, Inc.