family
Syntax
family family-name {
filter filter-name {
interface-specific;
micro-segmentation;
term term-name {
from {
match-conditions;
egress-to-ingress;
}
then {
action;
action-modifiers;
}
}
}
}
Hierarchy Level
[edit firewall]
Description
Configure the fields a firewall filter can match on.
Options
family-name—Type of addressing protocol:
ethernet-switching—Filter Layer 2 Ethernet packets and Layer 3 (IP) packets (allows some Layer 3 filtering). Not supported on OCX Series switches.egress-to-ingress—Include this option to increase the number of egress VLAN firewall filter terms from 1024 to 2048.evpn—Filter Ethernet VPN (EVPN) packets.inet—Filter Layer 3 IPv4 packets (provides additional Layer 3 filter options).inet6—Filter Layer 3 IPv6 packets (provides additional Layer 3 filter options).mpls—Filter multiprotocol label switched packets. Not supported on OCX Series switches.-
any—Filter packets based on protocol-independent match conditions.
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
interface—To view this statement in the configuration.interface-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 11.1.
evpn options introduced in Junos OS Release 15.1 for the MX Series.
egress-to-ingress option introduced in Junos OS Release 19.1R1 for the QFX5110.
any option introduced in Junos OS Release 22.4R1 for supported
QFX5120, EX4100, EX4400, and EX4650 Series switches.
micro-segmentation option introduced in Junos OS Release 22.4R1 for supported QFX5120, EX4100, EX4400, and EX4650 Series switches.