Configuring a Filter for Use with Enhanced Network Services Mode
For a statically-applied enhanced mode filter to function on statically created interfaces, you must include the enhanced mode statement in each filter. However, you do not need to configure the enhanced mode statement in filters that are dynamically applied to either static or dynamically-created interfaces.
For either static or dynamic interfaces to use enhanced network services mode, you must configure the router chassis network services to use either Enhanced IP Network Services mode or Enhanced Ethernet Network Services mode. By configuring chassis network services to run in one of the enhanced modes, the router enables only MPCs and MS-DPCs in the chassis. See Firewall Filters and Enhanced Network Services Mode Overview for details.
To configure a stateless firewall filter to use enhanced mode:
- Create or edit the stateless firewall filter.
You can configure enhanced mode firewall filters for only inet and inet6 filter families.
For IPv4:user@host# edit firewall family inet filter filter-name
For IPv6:user@host# edit firewall family inet6 filter filter-name
- Specify the filter as an enhanced mode filter.[edit firewall family inet filter filter-name]user@host# set enhanced-mode
- Configure or modify any filter terms.
See Example: Configuring and Applying a Simple Filter for a filter configuration example.