IPv6 Firewall Filtering

Firewall filters allow you to filter packets based on their contents and to perform an action on packets that match the filter.

The JUNOS Internet software provides a policy framework, which is a collection of JUNOS policies that include routing policies and firewall filter policies. These policies share some fundamental similarities. However, when referring to a firewall filter policy in the firewall filters part of the manual, the term firewall filter is used.

Depending on the hardware configuration of the router, you can use firewall filters for the following purposes:

• On routers equipped with an Internet Processor II ASIC, you can control data packets, which are chunks of data transiting the router as they are forwarded from a source to a destination.
• On all routers, you can control the local packets, which are chunks of data that are destined for or sent by the Routing Engine.

This chapter discusses the following topics that provide information for configuring IPv6 filters:

• Firewall Filter Overview
• Firewall Filter Configuration Guidelines
• Summary of Firewall Filter Configuration Statements

For a complete discussion of firewalls, see the JUNOS Software Configuration Guide: Policy Framework.