Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 3112 / 3946

Table 379: Supported Match Conditions Applicable to IPv4 Traffic for Firewall Filters on EX
Series Switches
(continued)
Supported Platforms and Bind Points
Description Match Condition Egress Ingress
• EX2200—not
supported
• EX3200 and
EX4200—Layer 3
interfaces
• EX4500—not
supported
• EX8200—not
supported
• EX2200—not
supported
• EX3200 and
EX4200—Layer 3
interfaces
• EX4500—not
supported
• EX8200—ports, VLANs,
and Layer 3 interfaces
8-bit protocol field that identifies the type
of header immediately following the IPv6
header. In place of the numeric value, you
can specify one of the following text
synonyms (the field values are also listed):
ah (51)
,
dstops (60)
,
egp (8)
,
esp (50)
,
fragment (44) , gre (47) , hop-by-hop (0) ,
icmp (1) , icmpv6 (1) , igmp (2) , ipip (4) , ipv6
(41)
,
no-next-header (59)
,
ospf (89)
,
pim
(103)
,
routing (43)
,
rsvp (46)
,
sctp (132)
,
tcp
(6)
,
udp (17)
, or
vrrp (112)
.
next-header bytes
• EX2200—ports, VLANs,
and Layer 3 interfaces
• EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
• EX4500—ports, VLANs,
and Layer 3 interfaces
• EX8200—ports, VLANs,
and Layer 3 interfaces
• EX2200—ports, VLANs,
and Layer 3 interfaces
• EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
• EX4500—ports, VLANs,
and Layer 3 interfaces
• EX8200—ports, VLANs,
and Layer 3 interfaces
IP precedence. In place of the numeric value,
you can specify one of the following text
synonyms (the field values are also listed):
critical-ecp (5)
,
flash (3)
,
flash-override (4)
,
immediate (2) , internet-control (6) ,
net-control (7) , priority (1) , or routine (0) .
precedence
precedence
•
EX2200—ports, VLANs,
and Layer 3 interfaces
• EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
•
EX4500—ports, VLANs,
and Layer 3 interfaces
• EX8200—ports, VLANs,
and Layer 3 interfaces
•
EX2200—ports, VLANs,
and Layer 3 interfaces
• EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
•
EX4500—ports, VLANs,
and Layer 3 interfaces
• EX8200—ports, VLANs,
and Layer 3 interfaces
IPv4 protocol value. In place of the numeric
value, you can specify one of the following
text synonyms:
egp (8)
,
esp (50)
,
gre (47)
,
icmp (1)
,
igmp
(2)
,
ipip (4)
,
ospf (89)
,
pim (103)
,
rsvp (46)
,
tcp (6)
,
udp
(17)
protocol list of
protocols
• EX2200—ports, VLANs,
and Layer 3 interfaces
•
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
• EX4500—ports, VLANs,
and Layer 3 interfaces
•
EX8200—ports, VLANs,
and Layer 3 interfaces
• EX2200—ports, VLANs,
and Layer 3 interfaces
•
EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
• EX4500—ports, VLANs,
and Layer 3 interfaces
•
EX8200—ports, VLANs,
and Layer 3 interfaces
IP source address field, which is the address
of the source node sending the packet. For
IPV6, the source-address field is 128 bits in
length. The filter description syntax supports
the text representations for IPv6 addresses
that are described in RFC 2373,
IP Version 6
Addressing Architecture .
source-address
ip-address
Copyright © 2010, Juniper Networks, Inc. 3016
Complete Software Guide for Junos
®
OS for EX Series Ethernet Switches, Release 10.3