[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring the Filter Terms

Each firewall filter consists of one or more terms. To configure a term, include the term statement:




term term-name { ... }

For IPv4 traffic, configure the filter terms at the [edit firewall family inet filter filter-name] hierarchy level. For IPv6 traffic, configure the filter terms at the [edit firewall family inet6 filter filter-name] hierarchy level. For MPLS traffic, configure the filter terms at the [edit firewall family mpls filter filter-name] hierarchy level. For Layer 2 bridging traffic, configure the filter terms at the [edit firewall family bridge filter] hierarchy level.

Note: Layer 2 bridging is supported only on the MX-series routers. For more information about how to configure Layer 2 bridging, see the JUNOS Network Interfaces Configuration Guide, the JUNOS MX-series Layer 2 Configuration Guide, and the JUNOS Feature Guide.

The name can contain letters, numbers, and hyphens (-) and can be up to 64 characters long. To include spaces in the name, enclose the entire name in quotation marks (“ ”).

Each term name must be unique within a filter.

You can specify multiple terms in a filter, effectively chaining together a series of match-action operations to apply to the packets on an interface. You can also use the next term action so that, when a match condition is met, the evaluation continues to the next term, rather than terminating.

Firewall filter terms are evaluated in the order in which you specify them in the configuration. To reorder terms, use the configuration mode insert command. For example, the command insert term up before term start places the term up before the term start.

[Contents] [Prev] [Next] [Index] [Report an Error]