firewall
语法
firewall {
family family-name {
filter filter-name {
interface-specific;
micro-segmentation;
term term-name {
from {
match-conditions;
}
then {
action;
action-modifiers;
}
}
}
}
policer policer-name {
filter-specific;
if-exceeding {
bandwidth-limit bps;
burst-size-limit bytes;
}
then {
policer-action;
}
}
}
three-color-policer policer-name {
action {
loss-priority high then discard
}
single-rate {
(color-aware | color-blind);
committed-burst-size bytes;
committed-information-rate bps;
excess-burst-size bytes;
}
two-rate {
(color-aware | color-blind );
committed-burst-size bytes;
committed-information-rate bps;
peak-burst-size bytes;
peak-information-rate bps;
}
}
层次结构级别
[edit]
必需的权限级别
防火墙 — 可在配置中查看此语句。防火墙控制 — 将此语句添加到配置中。
发布信息
在 Junos OS 9.0 版中引入的语句。
在适用于 EX 系列交换机的 Junos OS 9.5 版中引入的选项 interface-specific 和 filter-specific 。
在 Junos OS 22.4R1 版中为支持的 EX4100、EX4400、EX4650 和 QFX5120 系列交换机引入的选项 micro-segmentation 。