Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?




Syntax for promote gre-key

Syntax for promote dscp

Syntax for promote traffic-class

Hierarchy Level


Use the promote gre-key or promote dscp configuration statements to use gre-key or dscp match conditions in an inet firewall filter. Use the promote traffic-class configuration statement to use the traffic-class match condition in an inet6 firewall filter.


When you apply any of these configuration statements, the entire filter is compiled in a way to optimize the performance of these match conditions for their respective firewall filters. As an example, when you configure promote gre-key and use gre-key in any of the terms in a filter, the entire filter is compiled in a way that optimizes performance of the filter for gre-key matching.


All these configuration statements are supported on PTX Series routers only when network services is set to enhanced-mode. For more information, see enhanced-mode .


The following are the options for the promote configuration command.

  • gre-key

  • dscp

  • traffic-class

Required Privilege Level

firewall—To view this statement in the configuration.

firewall-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 15.1F3 and 16.1R2.