Technical Documentation

family

Syntax

family family-name {
filter filter-name {
accounting-profile name;
interface-specific;
physical-interface-filter;
}
prefix-action name {
count;
destination-prefix-length prefix-length;
policer policer-name;
source-prefix-length prefix-length;
subnet-prefix-length prefix-length;
}
simple-filter filter-name {
term term-name {
from {
match-conditions;
}
then {
action;
action-modifiers;
}
}
}
}

Hierarchy Level

[edit firewall],
[edit logical-systems logical-system-name firewall]

Release Information

Statement introduced before JUNOS Release 7.4.

Logical systems support introduced in JUNOS Release 9.3.

simple-filter statement introduced in JUNOS Release 7.6.

any family type introduced in JUNOS Release 8.0.

bridge family type introduced in JUNOS Release 8.4 (MX Series routers only).

Description

Configure a firewall filter for IP version 4 (IPv4) or IP version 6 (IPv6) traffic. On the MX Series routers only, configure a firewall filter for Layer 2 traffic in a bridging environment.

Options

family-name—Version or type of addressing protocol:

  • any—Protocol-independent match conditions.
  • bridge—(MX Series routers only) Layer 2 packets that are part of bridging domain.
  • ccc—Layer 2 switching cross-connects.
  • inet—IPv4 addressing protocol.
  • inet6—IPv6 addressing protocol.
  • mpls—MPLS.
  • vpls—Virtual private LAN service (VPLS).

The remaining statements are explained separately.

Usage Guidelines

See Configuring Standard Firewall Filters and Example: Configuring CoS for a PBB Network on MX Series Routers.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Published: 2009-10-19