The default-action statement overrides any action intrinsic to the protocol. This action is also nonterminating, so that various policy terms can be evaluated before the policy is terminated. You can specify a default action, either accept or reject, as follows:
- [edit]
-
policy-options {
-
-
policy-statement policy-name {
-
- term term-name {
-
- from {
- family family-name;
-
match-conditions;
- policy subroutine-policy-name;
- prefix-list name;
- route-filter destination-prefix match-type <actions>;
- source-address-filter source-prefix match-type <actions>;
- }
-
- to {
-
match-conditions;
- policy subroutine-policy-name;
- }
-
- then {
-
actions;
- default-action (accept | reject);
- }
- }
- }
- }
The resulting action is set either by the protocol or by the last policy term that is matched.