Configuring MX-series Filters

MX-series routers support firewall filters for the bridge and vpls protocol families. You configure these firewall filters to control traffic within bridge domains and VPLS instances. This chapter explores some of the ways that filters can be used in a Layer 2 (L2) environment to control traffic.

MX-series firewall filters can be applied to:

• Input interfaces
• Output interfaces
• Input to the L2 forwarding table

You use a firewall filter after taking the following two steps:

1. You configure any policers and the firewall filter at the [edit firewall] hierarchy level.
2. You apply the properly configured firewall filter to an interface.

Note: You should deploy firewall filters carefully because it is easy to cause unforeseen side effects on all traffic, especially traffic that is not the intended target of the filter. For more information about configuring firewall filters, see the JUNOS Policy Framework Configuration Guide.

Note: This chapter does not present exhaustive configuration listings for all routers in the figures. However, you can use it with a broader configuration strategy to complete the MX-series router network Ethernet Operations, Administration, and Maintenance (OAM) configurations.

This chapter provides the following information about JUNOS software firewall filters applied to MX-series routers at L2:

• Policing and Marking Traffic Entering a VPLS Core
• Filtering Frames by MAC Address
• Filtering Frames by IEEE 802.1p Bits
• Filtering Frames by Packet Loss Priority

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.