Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

family (Firewall)

Syntax

family protocol-family-name {filter filter-name {... filter-configuration ...}prefix-action prefix-action-name {... prefix-action-configuration ...}service-filter filter-name... filter-configuration ...}simple-filter filter-name {... filter-configuration ...}}

Hierarchy Level

[edit firewall],[edit logical-systems logical-system-name firewall]

Release Information

Statement introduced before Junos OS Release 7.4.

Logical systems support introduced in Junos OS Release 9.3.

simple-filter statement introduced in Junos OS Release 7.6.

any family type introduced in Junos OS Release 8.0 (not supported on PTX Series Packet Transport Routers).

bridge family type introduced in Junos OS Release 8.4 (MX Series routers only).

Description

Configure a firewall filter for IP version 4 (IPv4) or IP version 6 (IPv6) traffic. On the MX Series routers only, configure a firewall filter for Layer 2 traffic in a bridging environment.

Options

family-name

Version or type of addressing protocol:

  • any—Protocol-independent match conditions.
  • bridge—(MX Series routers only) Layer 2 packets that are part of bridging domain.
  • ccc—Layer 2 switching cross-connects.
  • inet—IPv4 addressing protocol.
  • inet6—IPv6 addressing protocol.
  • mpls—MPLS.
  • vpls—Virtual private LAN service (VPLS).

The remaining statements are explained separately.

Note: The packet lengths that a policer considers depends on the address family of the firewall filter. See Understanding the Frame Length for Policing Packets.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Published: 2013-08-28