• Supported Platforms
• MX Series

• Related Topics
• Configuring the Match Order for Fast Update Filters
• Configuring Terms for Fast Update Filters
• Associating Fast Update Filters to Interfaces in a Dynamic Profile
• Fast Update Filters Overview
• Dynamic Profiles Overview
• For information about firewall filters, see Configuring Standard Firewall Filters the Junos Policy Framework Configuration Guide

Configuring Fast Update Filters

You configure a fast update filter in a dynamic profile—this enables you to use dynamic variables in the filter configuration. After you configure fast update filters, you then use the dynamic-profiles syntax to associate the filter to the subscriber interface.

To configure a fast update filter for subscriber access:

1. Access the dynamic profile you want to use.
   [edit]user@host# edit dynamic-profiles myProfile
2. Specify that you want to configure a firewall, and specify the family.
   [edit dynamic-profiles myProfile]user@host# edit firewall family inet
3. Specify that you want to configure a fast update filter and assign a name to the filter.
   [edit dynamic-profiles myProfile firewall family inet]user@host# edit fast-update-filter httpFilter
4. Specify the interface-specific statement. This statement is mandatory.
   [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]user@host# set interface-specific
5. Configure the match order to use for the filter terms.
   [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]user@host# set match-order [source-address protocol destination-port]

   See Configuring the Match Order for Fast Update Filters.

6. Specify that you want to configure a term for the filter and assign the name to the term. Configure the match conditions and actions for the term.
   [edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]user@host# edit term term1[edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter term term1]user@host# set from protocol tcpuser@host# set from source-address $junos-subscriber-ip-addressuser@host# set from destination-port httpuser@host# set then count http-cnt

   See Configuring Terms for Fast Update Filters.