16.03.2014 Views

Policy Framework Configuration Guide - Juniper Networks

Policy Framework Configuration Guide - Juniper Networks

Policy Framework Configuration Guide - Juniper Networks

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Chapter 9: Firewall Filter <strong>Configuration</strong><br />

Table 35: Firewall Filter Actions (continued)<br />

Action<br />

Description<br />

traffic-class value<br />

(Family inet6 only) Specify the traffic-class code point. You can specify a numerical value from 0 through<br />

63. To specify the value in hexadecimal form, include 0x as a prefix. To specify the value in binary form,<br />

include b as a prefix.<br />

The default traffic-class value is best effort, that is, be or 0.<br />

In place of the numeric value, you can specify one of the following text synonyms:<br />

• af11—Assured forwarding class 1, low drop precedence<br />

• af12—Assured forwarding class 1, medium drop precedence<br />

• af13—Assured forwarding class 1, high drop precedence<br />

• af21—Assured forwarding class 2, low drop precedence<br />

• af22—Assured forwarding class 2, medium drop precedence<br />

• af23—Assured forwarding class 2, high drop precedence<br />

• af31—Assured forwarding class 3, low drop precedence<br />

• af32—Assured forwarding class 3, medium drop precedence<br />

• af33—Assured forwarding class 3, high drop precedence<br />

• af41—Assured forwarding class 4, low drop precedence<br />

• af42—Assured forwarding class 4, medium drop precedence<br />

• af43—Assured forwarding class 4, high drop precedence<br />

• be—Best effort<br />

• cs0—Class selector 0<br />

• cs1—Class selector 1<br />

• cs2—Class selector 2<br />

• cs3—Class selector 3<br />

• cs4—Class selector 4<br />

• cs5—Class selector 5<br />

• cs6—Class selector 6<br />

• cs7—Class selector 7<br />

• ef—Expedited forwarding<br />

NOTE: The actions traffic-class 0 or traffic-class be are supported only on T Series and M320 routers and<br />

on the 10-Gigabit Ethernet Modular Port Concentrator (MPC), 60-Gigabit Ethernet MPC, 60-Gigabit<br />

Ethernet Queuing MPC, and 60-Gigabit Ethernet Enhanced Queuing MPC on MX Series routers. However,<br />

these actions are not supported on Enhanced III Flexible PIC Concentrators (FPCs) on M320 routers.<br />

Example: Counting and Sampling Accepted Packets<br />

Count, sample, and accept the traffic:<br />

term all {<br />

then {<br />

count sam-1;<br />

sample; # default action is accept<br />

}<br />

}<br />

Display the packet counter:<br />

Copyright © 2010, <strong>Juniper</strong> <strong>Networks</strong>, Inc.<br />

231

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!