Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 3119 / 3946

Table 380: Supported Match Conditions Applicable to IPv6 Traffic for Firewall Filters on EX
Series Switches
(continued)
Supported Platforms and Bind Points
Description Match Condition Egress Ingress
• EX2200—ports and
VLANs
• EX3200 and
EX4200—ports and
VLANs
• EX4500—ports and
VLANs
• EX8200— ports and
VLANs.
• EX2200—ports and
VLANs
• EX3200 and
EX4200—ports and
VLANs
• EX4500—ports and
VLANs
• EX8200—ports and
VLANs
Ethernet type field of a packet. The
EtherType value specifies what protocol is
being transported in the Ethernet frame. In
place of the numeric value, you can specify
the following text synonym:
•
ipv6
—EtherType value IPv6 (0x08DD)
ether-type (ipv6)value
•
EX2200—ports, VLANs,
and Layer 3 interfaces
• EX3200 and
EX4200—Layer 3
interfaces
•
EX4500—VLANs and
Layer 3 interfaces
• EX8200—Layer 3
interfaces
•
EX2200—ports, VLANs,
and Layer 3 interfaces
• EX3200 and
EX4200—Layer 3
interfaces
•
EX4500—ports, VLANs,
and Layer 3 interfaces
• EX8200—Layer 3
interfaces
ICMP code field. This value or option
provides more specific information than
icmp-type . Because the value’s meaning
depends upon the associated icmp-type ,
you must specify
icmp-type
along with
icmp-code
. In place of the numeric value,
you can specify one of the following text
synonyms (the field values are also listed).
The options are grouped by the ICMP type
with which they are associated:
•
parameter-problem
—
ip-header-bad (0)
,
unrecognized-next-header (1)
,
unrecognized-option (2)
•
time-exceeded
—
ttl-eq-zero-
during-reassembly (1)
,
ttl-eq-zero-during-transit (0)
•
destination-unreachable
—
no-route-to--destination (0)
,
administratively-prohibited (1) ,
address-unreachable (3)
,
port-unreachable (4)
icmp-code number
3023 Copyright © 2010, Juniper Networks, Inc.
Chapter 100: Firewall Filters—Overview