Configuring Firewall Filters
You can configure firewall filters in a switch to control traffic that enters or exits Layer 3 (routed) interfaces. To use a firewall filter, you must configure the filter and then apply it to a Layer 3 interface.
Configuring a Firewall Filter
To configure a firewall filter:
For the complete list of match conditions, actions, and action modifiers, see Firewall Filter Match Conditions and Actions (EX4400, EX4600, EX4650, QFX5100, QFX5110, QFX5120, QFX5200, QFX5210, QFX5700). Note that on the OCX1100 switch you can use only those match conditions that are valid for IPv4 and IPv6 interfaces.
Applying a Firewall Filter to a Layer 3 (Routed) Interface
To apply a firewall filter to a Layer 3 interface: