[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring MPLS Firewall Filters

You can configure an MPLS firewall filter to count packets based on the experimental (EXP) bits for the top-level MPLS label in a packet. You can then apply this filter to a specific interface. You can also configure a policer for the MPLS filter to police (that is, rate-limit) the traffic on the interface to which the filter is attached. You cannot apply MPLS firewall filters to Ethernet (fxp0) or loopback (lo0) interfaces.

You can configure an MPLS firewall filter on the M-series and the T-series platforms.

You can configure the following match criteria attributes for MPLS filters at the [edit firewall family mpls filter filter-name term term-name from] hierarchy level:

exp
exp-except

These attributes can accept EXP bits in the range 0 through 7. You can configure the following choices:

A single EXP bit—for example, exp 3;
Several EXP bits—for example, exp 0, 4;
A range of EXP bits—for example, exp [0-5];

If you do not specify a match criterion (that is, you do not configure the from statement and use only the then statement with the count action keyword), all the MPLS packets passing through the interface on which the filter is applied will be counted.

You also can configure any of the following action keywords at the [edit firewall family mpls filter filter-name term term-name then] hierarchy level:

count
accept
discard
next
policer

For more information about how to configure firewall filters, see the JUNOS Policy Framework Configuration Guide. For more information about how to configure interfaces, see the JUNOS Network Interfaces Configuration Guide and the JUNOS Services Interfaces Configuration Guide.

[Contents] [Prev] [Next] [Index] [Report an Error]