[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring Service Filters

A service filter identifies packets on which services need to be applied. The service filter also identifies the Physical Interface Card (PIC) performing the service. To configure service filters, include the service-filter statement at the [edit firewall family inet] hierarchy level:



[edit firewall family inet]

service-filter filter-name {


term term-name {


from {

match-conditions;
}




then {

action; 

action-modifiers; 
}


}


}

Note: You must specify inet as the address family in order to configure a service filter.

Service filters are configured the same way as firewall filters. Service filters have a subset of the match conditions and actions for firewall filters.

One of the actions must be service or skip:

Specifying the service action directs packets for stateful-firewall service.
Specifying the skip action let packets bypass stateful-firewall service.

For more information about configuring firewall filters, see Configuring Firewall Filters. For more information about services and service interfaces, see the JUNOS Services Interfaces Configuration Guide.

[Contents] [Prev] [Next] [Index] [Report an Error]