Firewall Filter Configuration

To configure firewall filters, you include statements at the [edit] hierarchy level of the configuration:

[edit]

firewall {

    family family-name {

        filter filter-name {

            accounting-profile name

            interface-specific

            term term-name {

                from {

                    match-conditions;

                }

                then {

                    action; 

                    action-modifiers; 

                }

            }

        }

        service-filter filter-name {

            term term-name {

                from {

                    match-conditions;

                }

                then {

                    action; 

                    action-modifiers; 

                }

            }

        }

    }

}

The JUNOS software supports the following Requests for Comments (RFCs) related to filtering:

• RFC 792, Internet Control Message Protocol (ICMP)
• RFC 2474, Definition of the Differentiated Services (DS) Field
• RFC 2475, An Architecture for Differentiated Services
• RFC 2597, Assured Forwarding PHB
• RFC 2598, An Expedited Forwarding PHB
• RFC 2460, Internet Protocol Version 6

This chapter describes the following tasks for configuring firewall filters:

• Minimum Firewall Filter Configuration
• Configure Firewall Filters
• Configure Service Filters
• Apply Firewall Filters to Interfaces
• Configure Accounting
• Configure Filter-Based Forwarding
• Configure Forwarding Table Filters
• Configure Firewall Filter System Logging