Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


family (Firewall)


Hierarchy Level


Configure a firewall filter for IP version 4 (IPv4) or IP version 6 (IPv6) traffic. Only on MX Series routers and EX Series switches, configure a firewall filter for Layer 2 traffic in a bridging environment.


family-name—Version or type of addressing protocol:

  • any—Protocol-independent match conditions.

  • bridge—(MX Series routers only) Layer 2 packets that are part of bridging domain.

  • ethernet-switching—(EX Series switches) Filter Layer 2 (Ethernet) packets and Layer 3 (IP) packets.

  • ccc—Layer 2 switching cross-connects.

  • inet—IPv4 addressing protocol.

  • inet6—IPv6 addressing protocol.

  • mpls—MPLS.

  • vpls—Virtual private LAN service (VPLS).

The remaining statements are explained separately. See CLI Explorer.


The packet lengths that a policer considers depends on the address family of the firewall filter.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement introduced before Junos OS Release 7.4.

Logical systems support introduced in Junos OS Release 9.3.

simple-filter statement introduced in Junos OS Release 7.6.

any family type introduced in Junos OS Release 8.0.

bridge family type introduced in Junos OS Release 8.4 (MX Series routers only).