Technical Documentation

term

Syntax

term term-name {filter filter-name;from {match-conditions;}then {action;action-modifiers;}}

Hierarchy Level

[edit firewall family family-name filter filter-name],[edit firewall family family-name service-filter filter-name],[edit firewall family family-name simple-filter filter-name],[edit logical-systems logical-system-name firewall family family-name filter filter-name],[edit logical-systems logical-system-name firewall family family-name service-filter filter-name],[edit logical-systems logical-system-name firewall family family-name simple-filter filter-name]

Release Information

Statement introduced before JUNOS Release 7.4.

filter option introduced in JUNOS Release 7.6.

Logical systems support introduced in JUNOS Release 9.3.

Description

Define a firewall filter term.

Options

actions—(Optional) An action to take if conditions match. If you do not specify an action, the packets that match the conditions in the from statement are accepted. The actions are described in Configuring Actions in Firewall Filter Terms.

action-modifiers—(Optional) One or more actions to perform on a packet. The action modifiers are described in Configuring Actions in Firewall Filter Terms.

filter-name—(Optional) A filter within a filter. This term references another filter.

from—(Optional) Match packet fields to values. If not included, all packets are considered to match and the actions and action modifiers in the then statement are taken.

match-conditions—One or more conditions to use to make a match. The conditions are described in Overview of Match Conditions in Firewall Filter Terms.

term-name—Name that identifies the term. The name can contain letters, numbers, and hyphens (-), and can be up to 64 characters long. To include spaces in the name, enclose it in quotation marks (“ ”).

then—(Optional) Actions to take on matching packets. If not included and a packet matches all the conditions in the from statement, the packet is accepted.

Required Privilege Level

firewall—To view this statement in the configuration.

firewall-control—To add this statement to the configuration.


Published: 2010-05-11