Tag Elements Beginning with T > <then> (configuration/firewall/filter/term)

Usage

<configuration>
    <firewall>
        <filter>
            <term>
                <then>
                    <policer>policer</policer>
                    <three-color-policer>...</three-color-policer>
                    <count>count</count>
                    <log/>
                    <syslog/>
                    <sample/>
                    <port-mirror/>
                    <analyzer>analyzer</analyzer>
                    <loss-priority>loss-priority-choice</loss-priority>
                    <forwarding-class>forwarding-class</forwarding-class>
                    <virtual-channel>virtual-channel</virtual-channel>
                    <accept/>
                    <discard>...</discard>
                    <dscp>dscp</dscp>
                    <next>next-choice</next>
                    <logical-system>...</logical-system>
                    <routing-instance>...</routing-instance>
                    <topology>topology</topology>
                    <ipsec-sa>ipsec-sa</ipsec-sa>
                    <next-hop-group>next-hop-group</next-hop-group>
                    <reject>...</reject>
                    <load-balance>load-balance</load-balance>
                    <prefix-action>prefix-action</prefix-action>
                </then>
            </term>
        </filter>
    </firewall>
</configuration>

Description

Action to take if the 'from' condition is matched.

Contents

<accept>—Accept the packet.

<analyzer>—Name of analyzer - (Ingress only).

<count>—Count the packet in the named counter.

<discard>—Discard the packet.

<dscp>—Set the DSCP value to be remarked.

<forwarding-class>—Classify packet to forwarding class.

<ipsec-sa>—Use specified IPSec security association.

<load-balance>—Use specified load balancing group.

<log>—Log the packet.

<logical-system>—Packets are directed to specified logical system.

<loss-priority>—Packet's loss priority.

• high—Loss priority high.
• low—Loss priority low.
• medium-high—Loss priority medium-high.
• medium-low—Loss priority medium-low.

<next>—Continue to next term in a filter.

• term—Continue to next term in a filter.

<next-hop-group>—Use specified next-hop group.

<policer>—Name of policer to use to rate-limit traffic.

<port-mirror>—Port-mirror the packet.

<prefix-action>—Police or count packets using named prefix action.

<reject>—Reject the packet.

<routing-instance>—Packets are directed to specified routing instance.

<sample>—Sample the packet.

<syslog>—System log (syslog) information about the packet.

<three-color-policer>—Police the packet using a three-color-policer.

<topology>—Packets are directed to specified topology.

<virtual-channel>—Set the output interface virtual channel.