filter (Dynamic Firewalls)

Syntax

filter {input filter-name (precedence precedence;}output filter-name {precedence precedence;}}

Hierarchy Level

[edit dynamic-profiles profile-name interfaces interface-name unit logical-unit-number family family],[edit dynamic-profiles profile-name interfaces demux0 unit logical-unit-number family family],[edit dynamic-profiles profile-name interfaces pp0 unit “$junos–interface–unit” family family]

Release Information

Statement introduced in Junos OS Release 9.2.

The [edit dynamic-profiles profile-name interfaces pp0 unit “$junos-interface-unit” family family] hierarchy added in Junos 10.1.

Description

Apply a dynamic filter to an interface. You can configure filters for either family inet or family inet6, and the filters can be either classic filters or fast update filters. Only the Internet Protocol version 4 (IPv4) protocol family is currently supported for dynamic PPPoE logical interfaces.

Options

input filter-name—Name of one filter to evaluate when packets are received on the interface.

output filter-name—Name of one filter to evaluate when packets are transmitted on the interface.

The remaining statement is explained separately.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.