[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring the Family Address Type

To configure the family address type for a firewall filter, include the family statement at the [edit firewall] hierarchy level:



[edit firewall]

family  { ... }

Specify inet to filter IPv4 packets. Specify inet6 to filter IP version 6 (IPv6) packets. Specify mpls to filter Multiprotocol Label Switching (MPLS) packets. Specify vpls to filter virtual private LAN service (VPLS) packets. Specify ccc to filter Layer 2 switching cross-connects.

On the MX-series router only, to filter Layer 2 packets in a bridging environment, specify bridge.

Specify any to filter packets based upon protocol-independent fields. This type of filter allows the firewall to match on the following protocol-independent match conditions: forwarding-class, forwarding-class-except, interface, packet-length, packet-length-except, interface-index, and interface-set.

Note: The address type family any is supported on the loopback (lo0) interface only.

[Contents] [Prev] [Next] [Index] [Report an Error]