Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
Table 32: VPLS Firewall Filter Match Conditions (continued)
Match Condition
vlan-ether-type-except
value
Description
Do not match on the VLAN Ethernet type field of a VPLS packet.
Related
Documentation
• How to Specify Firewall Filter Match Conditions on page 220
Configuring Layer 2 Bridging Match Conditions for MX Series Ethernet Services Routers
Table 33 on page 214 describes the firewall filter match conditions supported for Layer 2
bridging traffic on MX Series routers.
To configure firewall filter match conditions for Layer 2 bridging traffic:
• Include the match-conditions statement at the [edit firewall family bridge filter filter-name
term term-name from] hierarchy level.
Table 33: Layer 2 Bridging Firewall Filter Match Conditions (MX Series Ethernet Services Routers
Only)
Match Condition
destination-mac-address
address
Description
Destination media access control (MAC) address of a Layer 2 packet in a bridging environment.
destination-port number
TCP or UDP destination port field. You cannot specify both the port and destination-port match
conditions in the same term.
dscp number
Differentiated Services code point (DSCP). The DiffServ protocol uses the type-of-service (ToS) byte
in the IP header. The most significant 6 bits of this byte form the DSCP. For more information, see the
Junos OS Class of Service Configuration Guide.
You can specify a numeric value from 0 through 63. To specify the value in hexadecimal form, include
0x as a prefix. To specify the value in binary form, include b as a prefix.
In place of the numeric value, you can specify one of the following text synonyms (the field values
are also listed):
• RFC 3246, An Expedited Forwarding PHB (Per-Hop Behavior), defines one code point: ef (46).
• RFC 2597, Assured Forwarding PHB Group, defines 4 classes, with 3 drop precedences in each class,
for a total of 12 code points:
af11 (10), af12 (12), af13 (14),
af21 (18), af22 (20), af23 (22),
af31 (26), af32 (28), af33 (30),
af41 (34), af42 (36), af43 (38)
ether-type value
Ethernet type field of a Layer 2 packet in a bridging environment.
ether-type-except value
Do not match on the Ethernet type field of a Layer 2 packet.
214
Copyright © 2010, Juniper Networks, Inc.