Navigation
Supported Platforms
Configuring a Fail Filter for Unicast RPF in Dynamic Profiles for Subscriber Interfaces
This topic describes how to configure a fail filter at the [edit firewall] hierarchy level that can be optionally applied by unicast RPF for subscriber interfaces in dynamic profiles on MX Series routers.
 | Note: In contrast to statically configured fail filters, RPF-check fail filters used in a dynamic profile cannot be specific to a particular interface. |
To configure a firewall fail filter:
- Create the filter.[edit]user@host# edit firewall family inet filter filter-name
- Specify a term for the filter.[edit firewall family inet filter filter-name]user@host# edit term term-name
- Configure the match conditions for the filter.[edit firewall family inet filter filter-name term term-name]user@host# set from match-conditions
- Configure the actions to be taken for the matching packets.[edit firewall family inet filter filter-name term term-name]user@host# set then actions
- (Optional) Repeat Steps 3 and 4 for additional filter terms.
