Navigation
Supported Platforms
Example: Configuring a Simple Filter
This simple filter sets the loss priority to low for TCP traffic with source address 1.1.1.1, sets the loss priority to high for HTTP (web) traffic with source addresses in the 4.0.0.0/8 range, and sets the loss priority to low for all traffic with destination address 6.6.6.6. The simple filter is applied as an input filter (arriving packets are checking for destination address 6.6.6.6, not queued output packets) on interface ge-0/0/1.0.
[edit]
firewall {family inet {simple-filter filter1 {term 1 {from {source-address {1.1.1.1/32;}protocol {tcp;}}then loss-priority low;}term 2 {from {source-address {4.0.0.0/8;}source-port {http;}}then loss-priority high;}term 3 {from {destination-address {6.6.6.6/32;}}then {loss-priority low;forwarding-class best-effort;}}}}}
interfaces {ge-0/0/1 {unit 0 {family inet {simple-filter {input filter1;}address 10.1.2.3/30;}}}}
