[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Configuring Fast Update Filters

You configure a fast update filter in a dynamic profile—this enables you to use dynamic variables in the filter configuration. After you configure fast update filters, you then use the dynamic-profiles syntax to associate the filter to the subscriber interface.

To configure a fast update filter for subscriber access:

  1. Access the dynamic profile you want to use.
    [edit]
    user@host# edit dynamic-profiles myProfile
  2. Specify that you want to configure a firewall, and specify the family.
    [edit dynamic-profiles myProfile]
    user@host# edit firewall family inet
  3. Specify that you want to configure a fast update filter and assign a name to the filter.
    [edit dynamic-profiles myProfile firewall family inet]
    user@host# edit fast-update-filter httpFilter
  4. Specify the interface-specific statement. This statement is mandatory.
    [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]
    user@host# set interface-specific
  5. Configure the match order to use for the filter terms.
    [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]
    user@host# set match-order [source-address protocol destination-port]

    See Configuring the Match Order for Fast Update Filters.

  6. Specify that you want to configure a term for the filter and assign the name to the term. Configure the match conditions and actions for the term.
    [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]
    user@host# edit term term1
    [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter term term1]
    user@host# set from protocol tcp
    user@host# set from source-address $junos-subscriber-ip-address
    user@host# set from destination-port http
    user@host# set then count http-cnt

    See Configuring Terms for Fast Update Filters.

Related Topics

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

[an error occurred while processing this directive]