[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Configuring Stateful Firewall Actions

To configure stateful firewall actions, include the then statement at the [edit services stateful-firewall rule rule-name term term-name] hierarchy level:




then {
(accept | discard | reject);

allow-ip-option [ values ];

syslog;
}

You must include one of the following three possible actions:

accept—The packet is accepted and sent on to its destination.
discard—The packet is not accepted and is not processed further.
reject—The packet is not accepted and a rejection message is returned; UDP sends an ICMP unreachable code and TCP sends RST. Rejected packets can be logged or sampled.

You can optionally configure the firewall to record information in the system logging facility by including the syslog statement at the [edit services stateful-firewall rule rule-name term term-name then] hierarchy level. This statement overrides any syslog setting included in the service set or interface default configuration.

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]