then (Services Stateful Firewall)
Syntax
then {
(accept <skip-ids>| discard | reject);
syslog;
}
Description
Define the stateful firewall term actions. You can configure the router to accept, discard, or reject the targeted traffic. The other actions are optional.
Options
accept—Accept the traffic and
send it on to its destination.
accept skip-ids—The packet is accepted and sent on to
its destination, but IDS rule processing configured on an MS-MPC or
MS-MIC is skipped.
discard—Do not accept traffic or process it
further.
reject—Do not accept the traffic and return
a rejection message. Rejected traffic can be logged or sampled.
The remaining statement is explained separately. See CLI Explorer.
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Release Information
Statement introduced before Junos OS Release 7.4.
skip-ids option added in Junos OS Release 17.1 on
MS-MPC and MS-MIC on MX Series.