For more detailed information about configuring firewall filters and configuring filter
match conditions for Layer 2 bridging traffic on the MX Series routers, see the Junos OS
Policy Framework Configuration Guide.
NOTE: Layer 2 bridging is supported only on the MX Series routers. For more
information about how to configure Layer 2 bridging, see the Junos OS Policy
Framework Configuration Guide, the Junos OS Routing Protocols Configuration
Guide, and the Junos OS Feature Guides.
This example Layer 2 bridging firewall filter finds any incoming frames with an IEEE 802.1p
learned VLAN priority level of either 1 or 2, and then classifies the packet in the best-effort
default forwarding class.
NOTE: This example does not present exhaustive configuration listings for
all routers in the figures. However, you can use this example with a broader
configuration strategy to complete the MX Series router network Ethernet
Operations, Administration, and Maintenance (OAM) configurations.
To configure filtering of frames by IEEE 802.1p bits:
1.
Configure the firewall filter filter-learn-vlan-configure-forwarding:
[edit firewall]
family bridge {
filter filter-learn-vlan-configure-forwarding {
term 0 {
from {
learn-vlan-1p-priority [1 2];
}
then forwarding-class best-effort;
}
}
}
2.
Apply the firewall filter filter-learn-vlan-configure-forwarding as an input filter to
ge-0/0/0:
[edit interfaces]
ge-0/0/0 {
unit 0 {
family bridge {
filter {
input filter-learn-vlan-configure-forwarding;
}
}
}
}
Related
Documentation
Layer 2 Firewall Filters•
• Firewall Filters for Bridge Domains and VPLS Instances on page 95
Copyright © 2012, Juniper Networks, Inc.100
Junos OS 12.1 MX Series 3D Universal Edge Routers Solutions Guide