 |
Note: On the MX-series routers with the Enhanced Queuing DPC, the forwarding-class is not supported as a from match condition. |
- firewall {
-
- family inet {
-
- simple-filter filter1 {
-
- term 1 {
-
- from {
-
- source-address {
- 1.1.1.1/32;
- }
-
- protocol {
- tcp;
- }
- }
- then loss-priority low;
- }
-
- term 2 {
-
- from {
-
- source-address {
- 4.0.0.0/8;
- }
-
- source-port {
- http;
- }
- }
- then loss-priority high;
- }
-
- term 3 {
-
- from {
-
- destination-address {
- 6.6.6.6/32;
- }
- }
-
- then {
- loss-priority low;
- forwarding-class best-effort;
- }
- }
- }
- }
- }
- interfaces {
-
- ge-0/0/1 {
-
- unit 0 {
-
- family inet {
-
- simple-filter {
- input filter1;
- }
- address 10.1.2.3/30;
- }
- }
- }
- }
