}
}
}
}
firewall {
family ccc {
filter filter-name {
accounting-profile [ profile-names ];
physical-interface-filter;
interface-specific;
term term-name {
filter filter-name;
from {
(forwarding-class [ class-names ] | forwarding-class-except [ class-names ]);
(interface-group [ group-names ] | interface-group-except [ group-names ]);
(learn-vlan-1p-priority [ priorities ] | learn-vlan-1p-priority [ priorities ]);
(loss-priority [ priorities ] | loss-priority-except [ priorities ]);
(user-vlan-1p-priority [ priorities ] | user-vlan-1p-priority [ priorities ]);
}
then {
... statements in Common Firewall Actions on page 33 PLUS ...
(accept | discard);
port-mirror-instance instance-name;
}
}
}
}
}
firewall {
family ethernet-switching {
filter filter-name {
interface-specific;
term term-name {
from {
destination-address {
ip-prefix</prefix-length>;
}
destination-mac-address {
mac-address;
}
destination-port [ port-names ];
destination-prefix-list {
list-name;
}
dot1q-tag [ tag-values ];
dot1q-user-priority [ priority-values ];
dscp [ code-point-values ];
ether-type [ protocol-names ];
fragment-flags flag;
icmp-code [ codes ];
icmp-type [ types ];
interface interface-name;
is-fragment;
Copyright © 2013, Juniper Networks, Inc.40
Class of Service Overview and Examples for EX9200 Switches