Juniper EX9200 Series

precedence [ precedence-names ];
protocol [ protocol-names ];
source-address {
ip-prefix</prefix-length>;
}
source-mac-address {
mac-address;
}
source-port [ port-names ];
source-prefix-list {
list-name;
}
tcp-established;
tcp-flags flag;
tcp-initial;
vlan [ vlan-names ];
}
then {
(accept | discard);
analyzer analyzer-name;
count counter-name;
forwarding-class class-name;
interface interface-name;
log;
loss-priority (high | low);
policer policer-name;
syslog;
vlan vlan-name;
}
}
}
}
}
firewall {
family inet {
dialer-filter filter-name {
accounting-profile [ profile-names ];
term term-name {
from {
... statements in Common IP Firewall Match Conditions on page 35 AND
statements in Common IPv4 Firewall Match Conditions on page 36 EXCEPT
FOR ...
(ah-spi [ values ] | ah-spi-except [ values ]); # NOT valid at this level
(destination-class [ class-names ] |
destination-class-except [ class-names ]); # NOT valid at this level
interface interface-name; # NOT valid at this level
(loss-priority [ priorities ] | loss-priority-except [ priorities ]); # NOT valid at
this level
service-filter-hit; # NOT valid at this level
(source-class [ class-names ] | source-class-except [ class-names ]); # NOT
valid at this level
}
then {
(ignore | note);
log;
41Copyright © 2013, Juniper Networks, Inc.
Chapter 4: Configuration Statements