Juniper ACX2000

Table 77: Nonterminating Actions for Standard Firewall Filters on ACX Series
Routers (continued)
Protocol FamiliesDescriptionNonterminating Action
family inetPort-mirror the packet based
on the specified family.
NOTE: This action is
supported on ingress only.
ACX5048 and ACX5096
routers do not support
port-mirror.
port-mirror
•
family inet
•
family inet6
•
family bridge
Log the packet to the system
log file.
NOTE: This action is
supported on ingress and
egress. The action on egress is
not supported for family inet6.
syslog
•
family any
•
family inet
•
family inet6
•
family mpls
•
family ccc
•
family bridge
•
family vpls
Police the packet using the
specified single-rate or
two-rate three-color policer.
You cannot also configure the
loss-priority action for the
same firewall filter term. These
two actions are mutually
exclusive.
three-color-policer (single-rate |
two-rate) policer-name
family inet6Set traffic-class code point
NOTE: This action is
supported on ingress only.
traffic-class
Related
Documentation
Guidelines for Configuring Firewall Filters on page 1044•
• Standard Firewall Filter Match Conditions and Actions on ACX Series Routers Overview
on page 1052
• Standard Firewall Filter Terminating Actions on ACX Series Routers on page 1063
Standard Firewall Filter Match Conditions for CCC Firewall Family Filters on ACX Series
Routers
Standard Firewall Filter Match Conditions for CCC Family Firewall Filters on ACX Series Routers
On ACX Series routers, you can configure a standard firewall filter with match conditions
for circuit cross-connection (CCC) traffic (family ccc).
Table 78 on page 1068 describes the match conditions you can configure at the [edit firewall
family ccc filter filter-name term term-name] hierarchy level.
1067Copyright © 2017, Juniper Networks, Inc.
Chapter 32: Configuring Firewall Filters