[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring the VPLS Filter Match Conditions

In the from statement in the VPLS filter term, you specify conditions that the packet must match for the action in the then statement to be taken. All conditions in the from statement must match for the action to be taken. The order in which you specify match conditions is not important, because a packet must match all the conditions in a term for a match to occur.

If you specify no match conditions in a term, that term matches all packets.

An individual condition in a from statement can contain a list of values. For example, you can specify numeric ranges or multiple source or destination addresses. When a condition defines a list of values, a match occurs if one of the values in the list matches the packet.

Individual conditions in a from statement can be negated. When you negate a condition, you are defining an explicit mismatch. For example, the negated match condition for forwarding-class is forwarding-class-except. If a packet matches a negated condition, it is immediately considered not to match the from statement, and the next term in the filter is evaluated, if there is one; if there are no more terms, the packet is discarded.

To specify the match conditions for a VPLS filter term, include the from statement at the [edit firewall family vpls filter filter-name term term-name] hierarchy level. Table 13 describes the match conditions available for VPLS filters.

[edit firewall family vpls filter filter-name term term-name]
from match-conditions;

Table 13: VPLS Filter Match Conditions

Match Condition

Description

destination-mac-address mac-address

Specified destination MAC address.

ether-type value

Ethernet packets. Configure the ether-type match condition when the encapsulation of the associated interfaces is ethernet-vpls.

forwarding-class value

Specified forwarding class.

interface-group index

Interface group on which the packet was received. An interface group is a set of one or more logical interfaces.

source-mac-address mac-address

Source MAC address.

vlan-ether-type value

VLAN Ethernet packets. Configure the vlan-ether-type match condition when the encapsulation of the associated interfaces is either vlan-vpls or extended-vlan-vpls.


[Contents] [Prev] [Next] [Index] [Report an Error]