Routing Policy and Firewall Filters

Support to configure DDoS protocol using CLI (EX4100 and EX4400)—Starting in Junos OS Release 24.2R1, you can configure the distributed denial of service (DDOS) protocol using CLI on EX4100 and EX4400 devices. You can also use the following operational commands to view the DDOS protocol information:

• show ddos-protection protocols

• show ddos-protection statistics

• show ddos-protection protocols violations

• show ddos-protection protocols parameters

• show ddos-protection protocols statistics

• clear ddos-protection protocols

[See ddos-protection (DDoS), show ddos-protection protocols, clear ddos-protection protocols, show ddos-protection statistics, show ddos-protection protocols violations, show ddos-protection protocols parameters, and show ddos-protection protocols statistics.]

Support for five tuple match conditions (MX204, MX240, MX304, MX480, MX960, MX10003, MX10004, MX10008, MX10016, MX2010, and MX2020—Starting in Junos OS Release 24.2R1, MX series routers running Junos OS support five tuple or five combined match conditions for high scale firewall filter performance improvement with only 5-tuple configurations per term without range configurations by avoiding execution of multiple terms in sequence.

[See fast-lookup-tuple, fast-lookup-tuple-list, and fast-lookup-tuple-list(policy-options).]