Routing Policy and Firewall Filters

Support for firewall filters on discard interfaces (PTX10001-36MR, PTX10004, PTX10008, PTX10016)—Starting in Junos OS Evolved Release 22.1R1, you can apply firewall filters on a discard interface. The action specified by the filter (log or count) is executed before the traffic is discarded. Firewall filters are supported only for IPv4 and IPv6 traffic in the egress direction of the interface.

[See Configuring Firewall Filters.]

Support for SDN-based network interconnects (PTX10004, PTX10008, PTX10016)—Starting in Junos OS Evolved Release 22.1R1, you can configure certain PTX device interfaces to pass traffic towards an SDN controller. You do this using firewall filters to match and redirect packets defined at the [edit services inline-monitoring instance name controller] hierarchy level. Supported match criteria includes IPv4, IPv6, and family any (destination), VLAN ID, and certain traceroute redirect packets.

[See Controller.]