Configure the VPLS Filter Match Conditions

In the from statement in the VPLS filter term, you specify conditions that the packet must match for the action in the then statement to be taken. All conditions in the from statement must match for the action to be taken. The order in which you specify match conditions is not important, because a packet must match all the conditions in a term for a match to occur.

If you specify no match conditions in a term, that term matches all packets.

An individual condition in a from statement can contain a list of values. For example, you can specify numeric ranges or multiple source or destination addresses. When a condition defines a list of values, a match occurs if one of the values in the list matches the packet.

Individual conditions in a from statement can be negated. When you negate a condition, you are defining an explicit mismatch. For example, the negated match condition for forwarding-class is forwarding-class-except. If a packet matches a negated condition, it is immediately considered not to match the from statement, and the next term in the filter is evaluated, if there is one; if there are no more terms, the packet is discarded.

Specify the match conditions for a VPLS filter term using the from statement. Table 4 describes the match conditions available for VPLS filters.

from match-conditions;

You can configure this statement at the [edit firewall family vpls filter filter-name term term-name] hierarchy level.

Table 4: VPLS Filter Match Conditions

Match Condition	Description
destination-mac-address mac-address	Specified destination MAC address.
ether-type value	Ethernet packets. Configure the ether-type match condition when the encapsulation of the associated interfaces is ethernet-vpls.
forwarding-class value	Specified forwarding class.
interface-group index	Interface group on which the packet was received. An interface group is a set of one or more logical interfaces.
source-mac-address mac-address	Source MAC address.
vlan-ether-type value	VLAN Ethernet packets. Configure the vlan-ether-type match condition when the encapsulation of the associated interfaces is either vlan-vpls or extended-vlan-vpls.