firewall

Syntax


                        
                           firewall {
                           
                              
                                 familyfamily-name {
                                 
                                 
                                    
                                       filter filter-name {
                                       
                                       interface-specific;
                                       
                                       
                                          
                                             term term-name {
                                             
                                             
                                                
                                                   from {
                                                   
                                                   
                                                      
                                                         match-conditions;
                                                         
                                                      
                                                   
                                                   }
                                                
                                             
                                             
                                                
                                                   then {
                                                   
                                                   
                                                      
                                                         action;
                                                         
                                                         action-modifiers;
                                                         
                                                      
                                                   
                                                   }
                                                
                                             
                                             }
                                          
                                       
                                       }
                                    
                                 
                                 }
                              
                           
                           
                              
                                 policerpolicer-name {
                                 
                                 filter-specific;
                                 
                                 
                                    
                                       if-exceeding {
                                       
                                       bandwidth-limit bps;
                                       
                                       burst-size-limit bytes;
                                       
                                       }
                                    
                                 
                                 
                                    
                                       then {
                                       
                                       policer-action;
                                       
                                       }
                                    
                                 
                                 }
                              
                           
                           }

Hierarchy Level


                        
                           [edit]

Release Information

Statement introduced in JUNOS Release 9.0 for EX Series switches.

Options interface-specific and filter-specific introduced in JUNOS Release 9.5 for EX Series switches.

Description

Configure firewall filters and policers.

The remaining statements are explained separately.

Required Privilege Level

firewall—To view this statement in the configuration.
firewall-control—To add this statement to the configuration.