Firewall Filter Configuration
To configure firewall filters, you include statements at the [edit firewall] hierarchy level of the configuration:
[edit firewall]
family family-name {
filter filter-name {
accounting-profile name;
interface-specific;
term term-name {
filter filter-name;
from {
match-conditions;
}
then {
action;
action-modifiers;
}
}
}
service-filter filter-name {
term term-name {
from {
match-conditions;
}
then {
action;
action-modifiers;
}
}
}
simple-filter filter-name {
term term-name {
from {
match-conditions;
}
then {
action;
action-modifiers;
}
}
 |
NOTE: Stateless firewall filtering is not supported on the interfaces you configure as tunnel sources. The firewall filter affects only the transit packets exiting the tunnel. |
|
NOTE: Class-of-Service (CoS) and firewall filter functionalities are supported on the MX960 Ethernet Services Router. |
This chapter describes the following tasks for configuring firewall filters:
- Minimum Firewall Filter Configuration
- Configuring Firewall Filters
- Configuring Service Filters
- Configuring Simple Filters
- Applying Firewall Filters to Interfaces
- Configuring Accounting
- Configuring Filter-Based Forwarding
- Configuring Forwarding Table Filters
- Configuring Firewall Filter System Logging