Juniper ACX2000 Configuration Guide

Table 81: Firewall Filter Match Conditions for VPLS Traffic (continued)
Description
Match Condition
(MX Series routers and EX Series switches only) Do not match destination prefixes in the specified
list. For more information, see the destination-prefix-list match condition.
destination-prefix-list name
except
(MX Series routers and EX Series switches only) Match the Differentiated Services code point
(DSCP). The DiffServ protocol uses the type-of-service (ToS) byte in the IP header. The most
significant 6 bits of this byte form the DSCP. For more information, see the “Understanding How
Behavior Aggregate Classifiers Prioritize Trusted Traffic” on page 950.
You can specify a numeric value from 0 through 63. To specify the value in hexadecimal form,
include 0x as a prefix. To specify the value in binary form, include b as a prefix.
In place of the numeric value, you can specify one of the following text synonyms (the field values
are also listed):
•
RFC 3246, An Expedited Forwarding PHB (Per-Hop Behavior), defines one code point: ef (46).
•
RFC 2597, Assured Forwarding PHB Group, defines 4 classes, with 3 drop precedences in each
class, for a total of 12 code points:
af11 (10), af12 (12), af13 (14),
af21 (18), af22 (20), af23 (22),
af31 (26), af32 (28), af33 (30),
af41 (34), af42 (36), af43 (38)
dscp number
(MX Series routers and EX Series switches only) Do not match on the DSCP. For details, see the
dscp match condition.
dscp-except number
Match the 2-octet IEEE 802.3 Length/EtherType field to the specified value or list of values.
You can specify decimal or hexadecimal values from 0 through 65535 (0xFFFF). A value from
0 through 1500 (0x05DC) specifies the length of an Ethernet Version 1 frame. A value from 1536
(0x0600) through 65535 specifies the EtherType (nature of the MAC client protocol) of an
Ethernet Version 2 frame.
In place of the numeric value, you can specify one of the following text synonyms (the hexadecimal
values are also listed): aarp (0x80F3), appletalk (0x809B), arp (0x0806), ipv4 (0x0800),
ipv6 (0x86DD), mpls-multicast (0x8848), mpls-unicast (0x8847), oam (0x8902), ppp (0x880B),
pppoe-discovery (0x8863), pppoe-session (0x8864), or sna (0x80D5).
ether-type values
Do not match the 2-octet Length/EtherType field to the specified value or list of values.
For details about specifying the values, see the ether-type match condition.
ether-type-except values
Copyright © 2017, Juniper Networks, Inc.1072
ACX Series Universal Access Router Configuration Guide

Juniper ACX2000 Specifications

General

Brand	Juniper
Model	ACX2000
Category	Network Router
Language	English