The following example shows a firewall filter sample-monitor, which, when attached to an interface, ensures that all traffic entering that interface with a source address matching address 10.1.1.1 is sampled and sent to the output interface ms-2/0/0.
- [edit]
- firewall {
-
- family inet {
-
- filter sample-monitor {
-
- term sample-term {
-
- from {
-
- source-address {
- 10.1.1.1/32;
- }
- }
-
- then {
- sample;
- accept;
- }
- }
- }
- }
- }
- forwarding-options {
-
- sampling {
-
- input {
-
- family inet {
- rate 1;
- }
- }
-
- output {
-
- extension-service abc-sample {
-
provider-specific rules;
- }
- interface ms-2/0/0;
- }
- }
You can attach the firewall filter created in the above sample to any interface in your network.