Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

TechLibrary
Navigation
Table of Contents
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Configuring a Filter for Use with Enhanced Network Services Mode

    For a statically-applied enhanced mode filter to function on statically created interfaces, you must include the enhanced mode statement in each filter. However, you do not need to configure the enhanced mode statement in filters that are dynamically applied to either static or dynamically-created interfaces.

    Note: For either static or dynamic interfaces to use enhanced network services mode, you must configure the router chassis network services to use either Enhanced IP Network Services mode or Enhanced Ethernet Network Services mode. By configuring chassis network services to run in one of the enhanced modes, the router enables only MPCs and MS-DPCs in the chassis. See Firewall Filters and Enhanced Network Services Mode Overview for details.

    To configure a stateless firewall filter to use enhanced mode:

    1. Create or edit the stateless firewall filter.

      Note: You can configure enhanced mode firewall filters for only inet and inet6 filter families.

      For IPv4:

      [edit]user@host# edit firewall family inet filter filter-name

      For IPv6:

      [edit]user@host# edit firewall family inet6 filter filter-name
    2. Specify the filter as an enhanced mode filter.
      [edit firewall family inet filter filter-name]user@host# set enhanced-mode
    3. Configure or modify any filter terms.

      See any of the filter configuration examples described in the Junos OS Firewall Filters and Traffic Policers Library for Routing Devices.

     

    Related Documentation

     

    Published: 2013-07-31

    Previous Page Next Page