Juniper EX9200 Series, Features Manual

Page: 184 / 278

Applying the Filter to a Logical Interface at the Protocol Family Level
Step-by-Step
Procedure
To apply the filter to the logical interface at the protocol family level:
Enable configuration of an IPv4 firewall filter.
[edit]
1.
user@host# edit interfaces ge-2/0/5 unit 0 family inet
2.
Apply the policer to the logical interface at the protocol family level.
[edit interfaces ge-2/0/5 unit 0 family inet]
user@host#
set address 10.10.10.1/30
user@host# set filter input filter-trtcm1ca-all
3.
(MX Series routers and EX Series switches only) (Optional) For input policers, you
can configure a fixed classifier. A fixed classifier reclassifies all incoming packets,
regardless of any preexisting classification.
[edit]
user@host#
set class-of-service interfaces ge-2/0/5 forwarding-class af
The classifier name can be a configured classifier or one of the default classifiers.
Results Confirm the configuration of the interface by entering the show interfaces configuration
mode command. If the command output does not display the intended configuration,
repeat the instructions in this procedure to correct the configuration.
[edit]
user@host#
show interfaces
ge-2/0/5 {
unit 0 {
family inet {
address 10.10.10.1/30;
filter {
input filter-trtcm1ca-all;
}
}
}
}
If you are done configuring the device, enter
commit
from configuration mode.
Verification
Confirm that the configuration is working properly.
• Displaying the Firewall Filters Applied to the Logical Interface on page 166
Displaying the Firewall Filters Applied to the Logical Interface
Purpose Verify that the firewall filter is applied to IPv4 input traffic at the logical interface.
Action Use the show interfaces operational mode command for the logical interface ge-2/0/5.0 ,
and specify detail mode. The Protocol inet section of the command output displays IPv4
Copyright © 2016, Juniper Networks, Inc. 166
Traffic Policers Feature Guide for EX9200 Switches