Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Defining Dynamic Filter Processing Order

You can force filter processing to occur in a particular order by using the precedence statement. You specify a precedence for input and output filters within a dynamic profile at the [edit dynamic-profiles profile-name interfaces (interface-name | demux0) unit logical-unit-number family family] hierarchy level.

The precedence range is from 0 through 250. Setting a lower precedence value for a filter gives it a higher precedence within the dynamic profile. A precedence of zero (the default) gives the filter the highest precedence. If no precedence is specified, the filter receives a precedence of zero (highest precedence). Filters with matching precedence (zero or otherwise) are applied in random order.

Before you define a precedence for a filter in a dynamic profile.

  1. Create the filters you want to attach to the dynamic profile.

    See Firewall Filters Overview for information about firewall filters and how to create them.

  2. Create a basic dynamic profile.

    See Configuring a Basic Dynamic Profile.

  3. Attach the filters to the dynamic profile.

    See Dynamically Attaching Statically Created Filters for Any Interface Type, Dynamically Attaching Statically Created Filters for a Specific Interface Family Type, or Dynamically Attaching Filters Using RADIUS Variables.

To define a precedence for an input and output filter:

  1. Specify the input filter precedence in the dynamic profile.
  2. Specify the output filter precedence in the dynamic profile.