Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All
     

    Related Documentation

     

    Configuring Fast Update Filters

    You configure a fast update filter in a dynamic profile—this enables you to use dynamic variables in the filter configuration. After you configure fast update filters, you then use the dynamic-profiles syntax to associate the filter with the subscriber interface.

    To configure a fast update filter for subscriber access:

    1. Access the dynamic profile you want to use.
      [edit]user@host# edit dynamic-profiles myProfile
    2. Specify that you want to configure a firewall, and specify the family.
      [edit dynamic-profiles myProfile]user@host# edit firewall family inet
    3. Specify that you want to configure a fast update filter and assign a name to the filter.
      [edit dynamic-profiles myProfile firewall family inet]user@host# edit fast-update-filter httpFilter
    4. Specify the interface-specific statement. This statement is mandatory.
      [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]user@host# set interface-specific
    5. Configure the match order to use for the filter terms.
      [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]user@host# set match-order [source-address protocol destination-port]

      See Configuring the Match Order for Fast Update Filters.

    6. Specify that you want to configure a term for the filter and assign the name to the term. Configure the match conditions and actions for the term.
      [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]user@host# edit term term1[edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter term term1]user@host# set from protocol tcpuser@host# set from source-address $junos-subscriber-ip-addressuser@host# set from destination-port httpuser@host# set then count http-cnt

      See Configuring Terms for Fast Update Filters.

     

    Related Documentation

     

    Published: 2013-02-11