Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


then (Filters)


Hierarchy Level


Configure a firewall filter action.



Actions to accept, discard, or forward packets that match all conditions specified in a filter term.

Starting in Junos OS Release 18.4R1, two new actions – port-mirror and port-mirror-instance – are added for all match conditions, which enable selective port mirroring of MPLS traffic to a mirrored destination.

The port-mirror action enables port mirroring globally on the device, which applies to all Packet Forwarding Engines (PFEs) and associated interfaces.

The port-mirror-instance action enables you to customize each instance with different properties for input sampling and port mirroring output destinations, instead of having to use a single system-wide configuration for port mirroring.

  • You can configure only two port mirroring instances per Flexible PIC Concentrator (FPC) by including the instance port-mirror-instance-name statement at the [edit forwarding-options port-mirror] hierarchy level. You can then associate individual port mirroring instances with an FPC, PIC, or (Forwarding Engine Board (FEB) depending on the device hardware.

  • For both port-mirror and port-mirror-instance actions, the output interface must be enabled with Layer 2 family and not family MPLS (Layer 3) for the selective port mirroring feature to work.


Additional actions to analyze, classify, count, or police packets that match all conditions specified in a filter term.

Required Privilege Level

firewall—To view this statement in the configuration.firewall-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 11.1.