Table 81: Firewall Filter Match Conditions for VPLS Traffic (continued)
Description
Match Condition
Packet loss priority (PLP) level. Specify a single level or multiple levels: low, medium-low,
medium-high, or high.
Supported on M120 and M320 routers; M7i and M10i routers with the Enhanced CFEB (CFEB-E);
and MX Series routers.
For IP traffic on M320, MX Series, and T Series routers with Enhanced II Flexible PIC Concentrators
(FPCs) and EX Series switches, you must include the tri-color statement at the [edit
class-of-service] hierarchy level to commit a PLP configuration with any of the four levels specified.
If the tri-color statement is not enabled, you can only configure the high and low levels. This
applies to all protocol families.
For information about the tri-color statement and about using behavior aggregate (BA) classifiers
to set the PLP level of incoming packets, see Understanding How Forwarding Classes Assign
Classes to Output Queues.
loss-priority level
Do not match on the packet loss priority level. Specify a single level or multiple levels: low,
medium-low, medium-high, or high.
For information about using behavior aggregate (BA) classifiers to set the PLP level of incoming
packets, see “Understanding How Behavior Aggregate Classifiers Prioritize Trusted Traffic” on
page 950.
loss-priority-except level
(MX Series routers and EX Series switches only) TCP or UDP source or destination port. You
cannot specify both the port match condition and either the destination-port or source-port match
condition in the same term.
port number
(MX Series routers and EX Series switches only) Do not match on the TCP or UDP source or
destination port. You cannot specify both the port match condition and either the destination-port
or source-port match condition in the same term.
port-except number
(MX Series routers and EX Series switches only) Match the destination or source prefixes in the
specified list. Specify the name of a prefix list defined at the [edit policy-options prefix-list
prefix-list-name] hierarchy level.
NOTE: VPLS prefix lists support only IPV4 addresses. IPV6 addresses included in a VPLS prefix
list will be discarded.
prefix-list name
(MX Series routers and EX Series switches only) Do not match the destination or source prefixes
in the specified list. For more information, see the destination-prefix-list match condition.
prefix-list name except
Source MAC address of a VPLS packet.source-mac-address address
(MX Series routers and EX Series switches only) TCP or UDP source port field. You cannot specify
the port and source-port match conditions in the same term.
source-port number
(MX Series routers and EX Series switches only) Do not match on the TCP or UDP source port
field. You cannot specify the port and source-port match conditions in the same term.
source-port-except number
Copyright © 2017, Juniper Networks, Inc.1078
ACX Series Universal Access Router Configuration Guide