Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 3115 / 3946

Table 379: Supported Match Conditions Applicable to IPv4 Traffic for Firewall Filters on EX
Series Switches
(continued)
Supported Platforms and Bind Points
Description Match Condition Egress Ingress
• EX2200—not
supported
• EX3200 and
EX4200—not
supported
• EX4500—not
supported
• EX8200—not
supported
• EX2200—Layer 3
interfaces
• EX3200 and
EX4200—Layer 3
interfaces
• EX4500—Layer 3
interfaces
• EX8200—Layer 3
interfaces
TTL type to match. The value can be 1–255. ttl value
•
EX2200—ports and
VLANs
• EX3200 and
EX4200—ports and
VLANs
•
EX4500—ports and
VLANs
• EX8200—ports and
VLANs
•
EX2200—ports and
VLANs
• EX3200 and
EX4200—ports and
VLANs
•
EX4500—ports and
VLANs
• EX8200—ports and
VLANs
The VLAN that is associated with the packet. vlan [vlan-name |
vlan-id]
Some of the numeric range and bit-field match conditions allow you to specify a text
synonym. For a list of all the synonyms for a match condition, do any of the following:
•
If you are using the J-Web Filters Configuration page, select the synonym from the
appropriate list.
• If you are using the CLI, type a question mark ( ? ) after the from statement.
To specify the bit-field value to match, you must enclose the values in quotation marks
(
" "
). For example, a match occurs if the RST bit in the TCP flags field is set:
tcp-flags "rst";
For information about logical operators and how to use bit-field logical operations to
create expressions that are evaluated for matches, see “Understanding Firewall Filter
Match Conditions” on page 3032.
On Juniper Networks EX Series Ethernet switches, you can apply a router firewall filter
to both IPv4 and IPv6 traffic. You can apply firewall filter match conditions to IPv6 traffic
on Layer 3 interfaces, aggregated Ethernet interfaces, and loopback interfaces. Table
380 on page 3020 describes the match conditions you can specify when configuring a
firewall filter for IPv6 traffic.
3019 Copyright © 2010, Juniper Networks, Inc.
Chapter 100: Firewall Filters—Overview