In addition to including policers in firewall filters, you can configure an interface set that is not part of a firewall filter configuration. An interface set groups a number of interfaces into one interface set name.
To configure an interface set, include the interface-set statement at the [edit firewall] hierarchy level:
- [edit firewall]
-
interface-set interface-set-name {
- [ interface-names ];
- }
You must specify more than one interface name to configure an interface set. This interface set can be used for firewall filter matching.