[Contents] [Prev] [Next] [Index] [Report an Error]

Defining Interface Groups in Firewall Filters

When applying a firewall filter, you can define an interface to be part of an interface group. Packets received on that interface are tagged as being part of the group. You can then match these packets using the interface-group match statement, as described in the JUNOS Policy Framework Configuration Guide.

To define the interface to be part of an interface group, include the group statement:



group filter-group-number;

You can include this statement at the following hierarchy levels:

[edit interfaces interface-name unit logical-unit-number family family filter]
[edit logical-systems logical-system-name interfaces interface-name unit logical-unit-number family family filter]

[Contents] [Prev] [Next] [Index] [Report an Error]