To configure firewall filters, include the
firewallstatement at the[edit]hierarchy level:[edit]firewall {familyfamily-name{ filterfilter-name{ accounting-profilename;interface-specific;termterm-name{ from {match-conditions; } then {action;action-modifiers;}}}}}
NOTE: You can specify IP version 4 (IPv4) filters at either the
[edit firewall]hierarchy level or the[edit firewall family inet]hierarchy level.The following sections describe the components of the
firewallstatement and provide examples of configuring firewall filters:
- Configuring the Family Address Type
- Configuring the Filter Name
- Configuring the Filter Terms
- Configuring a Filter Match Statement
- Configuring a Filter Action Statement
- How Firewall Filters Are Evaluated
- Filter Match Conditions
- How Firewall Filters Test a Packet's Protocol
- Configuring a Filter Within a Filter
- Examples: Defining Firewall Filters