• Downloads
• Configuring Terms for Fast Update Filters    

• Related Topics
• Configuring Fast Update Filters
• Configuring the Match Order for Fast Update Filters
• Fast Update Filters Overview
• Fast Update Filter Match Conditions
• Fast Update Filter Actions and Action Modifiers
• For additional information about firewall filter terms, see the following topics in the JUNOS Policy Framework Configuration Guide
  • Configuring Match Conditions in Firewall Filter Terms
  • Configuring Actions in Firewall Filter Terms

Configuring Terms for Fast Update Filters

A fast update filter consists of one or more terms. A term is made up of one or more match conditions and the action to take when a packet matches the specified conditions.

To configure a term for a fast update filter:

1. Access the fast update filter.

   [edit dynamic-profiles myProfile]

   user@host# edit firewall family inet fast-update-filter httpFilter

2. Create the new term and assign a name to the term.

   [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]

   user@host# set term term1

3. Configure the match condition for the term. See Fast Update Filter Match Conditions for the supported match conditions for fast update filters.

   [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]

   user@host# set from protocol tcp

   user@host# set from source-address $junos-subscriber-ip-address

   user@host# set from destination-port http

4. Configure the action that the router takes when the match conditions are met. See Fast Update Filter Actions and Action Modifiers for the supported actions for fast update filters.

   [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]

   user@host# set then accept

5. (Optional) Configure the action-modifiers that you want the router to take when the match conditions are met. See Fast Update Filter Actions and Action Modifiers for the supported action-modifiers for fast update filters.

   [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]

   user@host# set then count http-cnt

6. (Optional) Configure the term to be added only once, when the fast update filter is first created.

   [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]

   user@host# set only-at-create