Configuring a Firewall Filter for Packet Capture (Optional)

Navigate to the Firewall level in the configuration hierarchy.

In the configuration editor hierarchy, select Firewall.

From the top of the configuration hierarchy, enter edit firewall.

Define a firewall filter dest-all and a filter term—for example, dest-term—to capture packets with a particular destination address—for example, 192.168.1.1/32.

1. Next to Filter, click Add new entry.
2. In the filter name box, type dest-all.
3. Next to Term, click Add new entry.
4. In the Rule name box, type dest-term.
5. Next to From, click Configure.
6. Next to Destination address, click Add new entry.
7. In the Address box, type 192.168.1.1/32.
8. Click OK until you return to the Configuration page.

Set the filter and term name, and define the match condition and its action.

set firewall filter dest-all term dest-term from destination-address 192.168.1.1/32

set firewall filter dest-all term dest-term then sample accept

Navigate to the Interfaces level in the configuration hierarchy.

In the configuration editor hierarchy, select Interfaces.

Enter

set interfaces fe-0/0/1 unit 0 family inet filter output dest-all

Apply the dest-all filter to all the outgoing packets on the interface—for example, fe-0/0/1.0.

1. In the Interface name box, click fe-0/0/1.
2. In the Interface unit number box, click 0.
3. Next to Inet, select Yes, and click Edit.
4. Next to Filter, click Configure.
5. In the Output box, type dest-all.
6. Click OK until you return to the Interfaces page.