Navigation
Supported Platforms
Example: Dynamic-Profile Parsing
The following example shows the basic dynamic-profile parsing steps for Dynamic Profile Configuration and UID Substitution Comparison for Parameterized Filters. The steps apply to any parameterized filter.
- Read dynamic-profiles my-svc-prof interface ge-1/0/0 unit 7 family inet filter input and get the value my-filt-1gw_UID1022. The my-in-filter variable received the name of the UID (my-filt-1gw) from the first service parameter. The name my-filt-1gw_UID1022 comes from the value of the my-filt-1gw UID.
- Determine whether a static filter called my-filt-1gw_UID1022 exists. If so, this is the existing classic filter case and not a parameterized filter.
- Try to read dynamic-profile my-svc-prof firewall family inet fast-update-filter my-filt-1gw_UID1022’. If this exists, this is a fast update filter, not a parameterized filter.
- Try to read dynamic-profile my-svc-prof firewall family inet filter my-filt-1gw_UID1022. If this does not exist, return a “filter not found” error.
- Search for a template named my-filt-1gw_UID1022. If it does not exist:
- Read the parameterized filter configuration. This adds the match destination address 207.17.137.239 and the policer my-policer_UID1005 as the action.
- Determine whether my-policer_UID1005 exists. If it does not, read the dynamic-profile my-svc-prof firewall policer my-policer_UID1005 configuration and create the my-policer_UID1005 policer.
- Compile the my-filt-1gw_UID1022 filter.
- Install my-filt-1gw_UID1022 as a filter template.
- Create and install an interface-specific filter reference named my-filt-1gw_UID1022-ge-1/0/0.7-in with my-filt-1gw_UID1022 as its template.
- Attach my-filt-1gw_UID1022-ge-1/0/0.7-in to interface ge-1/0/0.7.
When subsequent sessions are created with the same parameters, the system returns the same my-filt-1gw_UID1022 filter name. In this case, Step 5 finds the existing filter template and proceeds directly to Step 6.
