Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

Supported Platforms

 

Related Documentation

 

Defining Dynamic Filter Processing Order

You can force filter processing to occur in a particular order by using the precedence statement. You specify a precedence for input and output filters within a dynamic profile at the [edit dynamic-profiles profile-name interfaces (interface-name | demux0) unit logical-unit-number family family] hierarchy level.

The precedence range is from 0 through 250. Setting a lower precedence value for a filter gives it a higher precedence within the dynamic profile. A precedence of zero (the default) gives the filter the highest precedence. If no precedence is specified, the filter receives a precedence of zero (highest precedence). Filters with matching precedence (zero or otherwise) are applied in random order.

Before you define a precedence for a filter in a dynamic profile.

  1. Create the filters you want to attach to the dynamic profile.

    See the Junos OS Firewall Filters and Traffic Policers Library for Routing Devices for detailed information about firewall filters and how to create them.

  2. Create a basic dynamic profile.

    See Configuring a Basic Dynamic Profile.

  3. Attach the filters to the dynamic profile.

    See Dynamically Attaching Statically Created Filters for Any Interface Type, Dynamically Attaching Statically Created Filters for a Specific Interface Family Type, or Dynamically Attaching Filters Using RADIUS Variables.

To define a precedence for an input and output filter:

  1. Specify the input filter precedence in the dynamic profile.
    [edit dynamic-profiles profile-name interfaces interface-name unit logical-unit-number family family]user@host# set filter input precedence 50
  2. Specify the output filter precedence in the dynamic profile.
    [edit dynamic-profiles profile-name interfaces interface-name unit logical-unit-number family family]user@host# set filter output precedence 5
 

Related Documentation

 

Published: 2013-07-31

Supported Platforms

 

Related Documentation

 

Published: 2013-07-31