Juniper EX9200 Series User Manual

Common IPv4 Firewall Match Conditions
This section lists statements that are valid at the following hierarchy levels, and is
referenced at those levels in “Complete [edit firewall] Hierarchy” on page 38 instead of
the statements being repeated.
•
[edit firewall family inet dialer-filter filter-name term term-name from] (with the
exceptions noted at this level in “Complete [edit firewall] Hierarchy” on page 38)
•
[edit firewall family inet filter filter-name term term-name from]
•
[edit firewall filter filter-name term term-name from]
The common IPv4 firewall match conditions are as follows:
(ah-spi [ values ] | ah-spi-except [ values ]);
(dscp [ code-point-values ] | dscp-except [ code-point-values ]);
(esp-spi [ values ] | esp-spi-except [ values ]);
first-fragment;
fragment-flags flag;
(fragment-offset [ offsets ] | fragment-offset-except [ offsets ]);
(ip-options [ option-names ] | ip-options-except [ option-names ]);
is-fragment;
(precedence [ precedence-names ] | precedence-except [ precedence-names ]);
(protocol [ protocol-names ] | protocol-except [ protocol-names ]);
(ttl [ ttl-values ] | ttl-except [ ttl-values ]);
Common Layer 2 Firewall Match Conditions
This section lists statements that are valid at the following hierarchy levels, and is
referenced at those levels in “Complete [edit firewall] Hierarchy” on page 38 instead of
the statements being repeated.
•
[edit firewall family ethernet-switching filter filter-name term term-name from]
•
[edit firewall family vpls filter filter-name term term-name from]
The common Layer 2 firewall match conditions are as follows:
destination-mac-address {
mac-address <except>;
}
(destination-port [ port-names ] | destination-port-except [ port-names ]);
(dscp [ code-point-values ] | dscp-except [ code-point-values ]);
(ether-type [ protocol-types ] | ether-type-except [ protocol-types ]);
(forwarding-class [ class-names ] | forwarding-class-except [ class-names ]);
(icmp-code [ codes ] | icmp-code-except [ codes ]);
(icmp-type [ types ] | icmp-type-except [ types ]);
(interface-group [ group-names ] | interface-group-except [ group-names ]);
ip-address {
ip-prefix</prefix-length> <except>;
}
ip-destination-address {
ip-prefix</prefix-length> <except>;
}
Copyright © 2013, Juniper Networks, Inc.36
Class of Service Overview and Examples for EX9200 Switches

Juniper EX9200 Series Specifications

General

Brand	Juniper
Model	EX9200 Series
Category	Switch
Language	English