Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?




Hierarchy Level


Configure simple filters.



Name that identifies the simple filter. The name must be a non-reserved string of not more than 64 characters. No special characters are restricted. To include spaces in the name, enclose them in quotation marks (“ ”).


Match packet fields to values. If the from option is not included, all packets are considered to match and the actions and action modifiers in the then statement are taken.


One or more conditions to use to make a match.

term term-name

Define a simple-filter term. The name that identifies the term can contain letters, numbers, and hyphens (-), and can be up to 255 characters long. To include spaces in the name, enclose them in quotation marks (“ ”).


Actions to take on matching packets. If the then option is not included and a packet matches all the conditions in the from statement, the packet is accepted.


Only forwarding-class and loss-priority are valid actions in a simple filter configuration.

Required Privilege Level

firewall—To view this statement in the configuration.

firewall-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 7.6.

Logical systems support introduced in Junos OS Release 9.3.