Download PDFs
firewall

firewall

Syntax


                        
                           firewall {
                           
                              
                                 familyfamily-name {
                                 
                                 
                                    
                                       filter filter-name {
                                       
                                       interface-specific;
                                       
                                       term term-name {
                                       
                                       
                                          
                                             from {
                                             
                                             
                                                
                                                   match-conditions;
                                                   
                                                
                                             
                                             }
                                          
                                       
                                       
                                          
                                             then {
                                             
                                             
                                                
                                                   action;
                                                   
                                                   action-modifiers;
                                                   
                                                
                                             
                                             }
                                          
                                       
                                       }
                                       }
                                    
                                 
                                 }
                              
                           
                           
                              
                                 policerpolicer-name {
                                 
                                 filter-specific;
                                 
                                 
                                    
                                       if-exceeding {
                                       
                                       bandwidth-limitbps;
                                       
                                       burst-size-limitbytes;
                                       
                                       }
                                    
                                 
                                 
                                    
                                       then {
                                       
                                       policer-action;
                                       
                                       }
                                    
                                 
                                 }
                              
                           
                           }

Hierarchy Level


                        
                           [edit]

Release Information

Statement introduced in JUNOS Release 9.0 for EX-series switches.

Option interface-specific introduced in JUNOS Release 9.5 for EX-series switches.

Description

Configure firewall filters and policers.

The remaining statements are explained separately.

Required Privilege Level

firewall—To view this statement in the configuration.
firewall-control—To add this statement to the configuration.