Firewall Filter Configuration

[Contents] [Prev] [Next] [Index] [Report an Error]

To configure firewall filters, you include statements at the [edit firewall] hierarchy level of the configuration:



[edit firewall]

family family-name {



filter filter-name {

accounting-profile name; 

interface-specific; 



term term-name {

filter filter-name;


from {

match-conditions;
}




then {

action; 

action-modifiers; 
}


}


}





service-filter filter-name {



term term-name {


from {

match-conditions;
}




then {

action; 

action-modifiers; 
}


}


}





simple-filter filter-name {



term term-name {


from {

match-conditions;
}




then {

action; 

action-modifiers; 
}


}


}


}

Note: Stateless firewall filtering is not supported on the interfaces you configure as tunnel sources. The firewall filter affects only the transit packets exiting the tunnel.

This chapter describes the following tasks for configuring firewall filters:

[Contents] [Prev] [Next] [Index] [Report an Error]