When you define a firewall filter, you select the initial traffic to be monitored. To configure a firewall filter, include the filter statement at the [edit firewall family inet] hierarchy level. All filtered traffic to be monitored must be accepted.
- [edit]
- firewall {
-
- family inet {
-
- filter input-monitoring-filter {
-
- term 1 {
-
- from {
-
- destination-address {
- 10.7.0.0/16;
- }
- }
-
- then {
- count counter1;
- accept;
- }
- }
-
- term 2 {
-
- from {
-
- destination-address {
- 10.6.0.0/16;
- }
- }
-
- then {
- count counter2;
- accept;
- }
- }
- }
- }
- }