Juniper EX9200 Series - Page 57

source-address {
ip-prefix</prefix-length>;
}
(source-port [ port-names ] | source-port-except [ port-names ]);
source-prefix-list {
list-name;
}
tcp-flags flag-name;
}
then {
count counter-name;
log;
port-mirror;
sample;
(service | skip);
}
}
}
simple-filter filter-name {
term term-name {
from {
destination-address ip-prefix</prefix-length>;
destination-port port-name;
forwarding-class [ class-names ];
protocol protocol-name;
source-address ip-prefix</prefix-length>;
source-port port-name;
}
then {
forwarding-class class-name;
loss-priority (high | low | medium-high | medium-low);
policer policer-name;
}
}
}
}
}
firewall {
family inet6 {
dialer-filter filter-name {
accounting-profile [ profile-names ];
term term-name {
from {
... statements in Common IP Firewall Match Conditions on page 35 PLUS ...
(next-header [ protocol-types ] | next-header-except [ protocol-types ]);
... BUT NOT ...
(destination-class [ class-names ] |
destination-class-except [ class-names ]); # NOT valid at this level
(forwarding-class [ class-names ] |
forwarding-class-except [ class-names ]); # NOT valid at this level
interface interface-name; # NOT valid at this level
(interface-group [ group-names ] | interface-group-except [ group-names ]); #
NOT valid at this level
(loss-priority [ priorities ] | loss-priority-except [ priorities ]); # NOT valid at
this level
43Copyright © 2013, Juniper Networks, Inc.
Chapter 4: Configuration Statements