Juniper JUNOS OS 10.3 - SOFTWARE, Manual

Page: 3121 / 3946

Table 380: Supported Match Conditions Applicable to IPv6 Traffic for Firewall Filters on EX
Series Switches
(continued)
Supported Platforms and Bind Points
Description Match Condition Egress Ingress
• EX2200—ports, VLANs,
and Layer 3 interfaces
• EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
• EX4500—ports, VLANs,
and Layer 3 interfaces
• EX8200—Layer 3
interfaces
• EX2200—ports, VLANs,
and Layer 3 interfaces
• EX3200 and
EX4200—ports, VLANs,
and Layer 3 interfaces
• EX4500—ports, VLANs,
and Layer 3 interfaces
• EX8200—Layer 3
interfaces
Length of the received packet, in bytes.
The length refers only to the IP packet,
including the packet header, and does not
include any Layer 2 encapsulation overhead.
packet-length bytes
•
EX2200—Layer 3
interfaces
• EX3200 and
EX4200—Layer 3
interfaces
•
EX4500—Layer 3
interfaces
• EX8200—Layer 3
interfaces
•
EX2200—Layer 3
interfaces
• EX3200 and
EX4200—Layer 3
interfaces
•
EX4500—Layer 3
interfaces
• EX8200—Layer 3
interfaces
IP source address field, which is 128 bits in
length. The filter description syntax supports
the text representations for IPv6 addresses
that are described in RFC 2373,
IP Version 6
Addressing Architecture .
source-address
ip-address
• EX2200—ports and
VLANs
•
EX3200 and
EX4200—ports and
VLANs
• EX4500—ports and
VLANs
•
EX8200—ports and
VLANs
• EX2200—ports and
VLANs
•
EX3200 and
EX4200—ports and
VLANs
• EX4500—ports and
VLANs
•
EX8200—ports and
VLANs
Source MAC address.
You can define a source MAC address with
a prefix, such as
from
destination-mac-address
00:01:02:03:04:05/24
. If no prefix is
specified, the default value is taken as 48.
source-mac-address
mac-address
• EX2200—Layer 3
interfaces
• EX3200 and
EX4200—Layer 3
interfaces
• EX4500—Layer 3
interfaces
• EX8200—Layer 3
interfaces
• EX2200—Layer 3
interfaces
• EX3200 and
EX4200—Layer 3
interfaces
• EX4500—Layer 3
interfaces
• EX8200—Layer 3
interfaces
TCP or UDP source-port field. Typically, you
specify this match in conjunction with the
next-header
match statement to determine
which next-header is being used on the port.
In place of the numeric field, you can specify
one of the text synonyms listed under
destination-port
.
source-port number
3025 Copyright © 2010, Juniper Networks, Inc.
Chapter 100: Firewall Filters—Overview