Configuring a Simple Filter
This simple filter sets the loss priority to low for TCP traffic
with source address 10.1.1.1, sets the loss priority to
high for HTTP (web) traffic with source addresses in the 203.0.113.0/24 range, and sets the loss priority to low for all traffic with destination
address 10.6.6.6. The simple filter is applied as an input
filter (arriving packets are checking for destination address 10.6.6.6, not queued output packets) on interface ge-0/0/1.0.
[edit]
firewall {
family inet {
simple-filter filter1 {
term 1 {
from {
source-address {
10.1.1.1/32;
}
protocol {
tcp;
}
}
then loss-priority low;
}
term 2 {
from {
source-address {
203.0.113.0/24;
}
source-port {
http;
}
}
then loss-priority high;
}
term 3 {
from {
destination-address {
10.6.6.6/32;
}
}
then {
loss-priority low;
forwarding-class best-effort;
}
}
}
}
}
interfaces {
ge-0/0/1 {
unit 0 {
family inet {
simple-filter {
input filter1;
}
address 10.1.2.3/30;
}
}
}
}