Firewall Filter Configuration > Minimum Firewall Filter Configuration

To configure a firewall filter, you must perform at least the following tasks:

• Configure firewall filters—To configure firewall filters, include the family family-name statement and one or more filter statements at the [edit firewall] hierarchy level:

[edit firewall]

family family-name {

    filter filter-name {

        term term-name {

            from {

                match-conditions;

            }

            then {

                action; 

                action-modifiers; 

            }

        }

    }

}

• Apply firewall filters to interfaces—Firewall filters control local packets to and from the Routing Engine if they are applied to the loopback interface, lo0. With the Internet Processor II application-specific integrated circuit (ASIC), firewall filters can control data packets through the routing platform when they are applied to an external interface. To have a firewall filter take effect, you must apply it to an interface by including the filter statement at the [edit interfaces interface-name unit logical-unit-number family family-name] hierarchy level:

[edit interfaces interface-name unit logical-unit-number family family-name]

filter {

    input filter-name;

    output filter-name;

}