Related Documentation
- MX Series
- Example: Configuring Policing and Marking of Traffic Entering a VPLS Core
- Example: Configuring Filtering of Frames by MAC Address
- Example: Configuring Filtering of Frames by IEEE 802.1p Bits
- Example: Configuring Filtering of Frames by Packet Loss Priority
- Additional Information
- Layer 2 Firewall Filters
Firewall Filters for Bridge Domains and VPLS Instances
Juniper Networks MX Series 3D Universal Edge Routers support firewall filters for the bridge and vpls protocol families. You configure these firewall filters to control traffic within bridge domains and VPLS instances. This chapter explores some of the ways that filters can be used in a Layer 2 environment to control traffic.
MX Series router firewall filters can be applied to:
- Input interfaces
- Output interfaces
- Input to the Layer 2 forwarding table
 | Note: Broadcast, unicast unknown, and multicast (BUM) traffic are not affected by input and output policers. BUM traffic can only be filtered by forwarding table policies. |
You use a firewall filter after taking the following two steps:
- You configure any policers and the firewall filter at the [edit firewall] hierarchy level.
- You apply the properly configured firewall filter to an interface or a bridge-domain.
| Note: You should deploy firewall filters carefully because it is easy to cause unforeseen side effects on all traffic, especially traffic that is not the intended target of the filter. For more information about configuring firewall filters, see the Routing Policy Configuration Guide. |
| Note: If the chassis is running in Enhanced IP mode, a single shared filter instance is created for a filter applied across bridge domains. However, if the chassis is not running in Enhanced IP mode, then separate filter instances are created for each bridge domain that the filter is applied to. |
Related Documentation
- MX Series
- Example: Configuring Policing and Marking of Traffic Entering a VPLS Core
- Example: Configuring Filtering of Frames by MAC Address
- Example: Configuring Filtering of Frames by IEEE 802.1p Bits
- Example: Configuring Filtering of Frames by Packet Loss Priority
- Additional Information
- Layer 2 Firewall Filters
