TechLibrary

Table of Contents

Guide That Contains This Content

[+] Expand All

[-] Collapse All

[edit dynamic-profiles firewall] Hierarchy Level

dynamic-profiles {profile-name {firewall {family inet {fast-update-filter filter-name {interface-specific;match-order [ destination-address destination-port dscp protocol source-address source-port ];term term-name {from {destination-address ip-prefix</prefix-length>;destination-port (afs | bgp | biff | bootpc | bootps | cmd | cvspserver | dhcp | domain | eklogin | ekshell | exec | finger | ftp | ftp-data | http | https | ident | imap | kerberos-sec | klogin | kpasswd | krb-prop | krbupdate | kshell | ldap | ldp | login | mobileip-agent | mobilip-mn | msdp | netbios-dgm | netbios-ns | netbios-ssn | nfsd | nntp | ntalk | ntp | pop3 | pptp | printer | radacct | radius | rip | rkinit | smtp | snmp | snmptrap | snpp | socks | ssh | sunrpc | syslog | tacacs | tacacs-ds | talk | telnet | tftp | timed | who | xdmcp);dscp (forwarding-class | forwarding-class–forwarding-class);match-terms match-criteria;protocol (ah | dstops | egp | esp | fragment | gre | hop-by-hop | icmp | icmpv6 | igmp | ipip | ipv6 | no-next-header | ospf | pim | routing | rsvp | sctp | tcp | udp | vrrp |protocol-name–protocol-name);source-address ip-prefix</prefix-length>;(source-port (... same values as for the preceding destination-port statement ...);}only-at-create;then {(accept | discard | routing-instance routing-instance-name <topology topology-name>);action-terms actions;count counter-name;forwarding-class class-name;log;loss-priority (high | low | medium-high | medium-low);policer policer-name;port-mirror;}}}}}}}

TechLibrary

Related Documentation

[edit dynamic-profiles firewall] Hierarchy Level

Related Documentation

Published: 2012-11-26