• Downloads
• Configuring Fast Update Filters    

• Related Topics
• Configuring the Match Order for Fast Update Filters
• Configuring Terms for Fast Update Filters
• Associating Fast Update Filters to Interfaces in a Dynamic Profile
• Fast Update Filters Overview
• Dynamic Profiles Overview
• For information about firewall filters, see Configuring Firewall Filters the JUNOS Policy Framework Configuration Guide

Configuring Fast Update Filters

You configure a fast update filter in a dynamic profile—this enables you to use dynamic variables in the filter configuration. After you configure fast update filters, you then use the dynamic-profiles syntax to associate the filter to the subscriber interface.

To configure a fast update filter for subscriber access:

1. Access the dynamic profile you want to use.

   [edit]

   user@host# edit dynamic-profiles myProfile

2. Specify that you want to configure a firewall, and specify the family.

   [edit dynamic-profiles myProfile]

   user@host# edit firewall family inet

3. Specify that you want to configure a fast update filter and assign a name to the filter.

   [edit dynamic-profiles myProfile firewall family inet]

   user@host# edit fast-update-filter httpFilter

4. Specify the interface-specific statement. This statement is mandatory.

   [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]

   user@host# set interface-specific

5. Configure the match order to use for the filter terms.

   [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]

   user@host# set match-order [source-address protocol destination-port]

   See Configuring the Match Order for Fast Update Filters.

6. Specify that you want to configure a term for the filter and assign the name to the term. Configure the match conditions and actions for the term.

   [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]

   user@host# edit term term1

   [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter term term1]

   user@host# set from protocol tcp

   user@host# set from source-address $junos-subscriber-ip-address

   user@host# set from destination-port http

   user@host# set then count http-cnt

   See Configuring Terms for Fast Update Filters.