示例:为订阅者访问配置快速更新筛选器
此示例说明如何配置快速更新筛选器,该筛选器是计算来自订阅服务器的 HTTP 和非 HTTP 数据包的输入筛选器。在此示例中,您使用防火墙节创建过滤器,使用接口节附加过滤器。
[edit dynamic-profiles myProfile] firewall { family inet { fast-update-filter httpFilter { interface-specific; match-order [source-address protocol destination-port]; term term1 { from { protocol tcp; source-address $junos-subscriber-ip-address; destination-port http; } then { count http-cnt; } } term term2 { from { protocol tcp; source-address $junos-subscriber-ip-address; } then { count non-http-cnt; } } } } } interfaces { "$junos-interface-ifd-name" { unit "$junos-underlying-interface-unit" { family inet { filter { input httpFilter; } } } } }