Juniper EX9200 Series

ip-prefix</prefix-length>;
}
(source-port [ port-names ] | source-port-except [ port-names ]);
source-prefix-list {
list-name;
}
tcp-flags flag-name;
}
then {
count counter-name;
log;
port-mirror;
sample;
(service | skip);
}
}
}
}
}
firewall {
family mpls {
filter filter-name {
accounting-profile [ profile-names ];
interface-specific;
physical-interface-filter;
term term-name {
from {
(exp [ exp-bits ] | exp-except [ exp-bits ]);
}
then {
(ignore | note);
log;
sample;
syslog;
}
}
}
filter filter-name {
accounting-profile [ profile-names ];
interface-specific;
physical-interface-filter;
term term-name {
filter filter-name;
from {
(exp [ exp-bits ] | exp-except [ exp-bits ]);
(forwarding-class [ class-names ] | forwarding-class-except [ class-names ]);
interface interface-name;
interface-set set-name;
(loss-priority [ priorities ] | loss-priority-except [ priorities ]);
}
then {
... statements in Common Firewall Actions on page 33 PLUS ...
(accept | discard);
sample;
}
45Copyright © 2013, Juniper Networks, Inc.
Chapter 4: Configuration Statements