egress-l2-extended-match
Syntax
egress-l2-extended-match
Hierarchy Level
[edit system packet-forwarding-options firewall-profile egress-l2-extended-match]
Description
Set this configuration to support TCP-flags, dscp, ip-version, and icmp-type matches for egress port firewall filters and egress VLAN firewall filters.
The configuration is applicable for EX4400, EX4100, QFX5120-48Y, EX4650-48Y, QFX5120-32C, QFX5120-48T, and QFX5120-48YM platforms.
This knob will restart PFE for standalone box. For Virtual Chassis, it requires manual reboot to take effect.
If the knob is not configured, then commit error is issued if these matches are present in the firewall filter configuration.
Required Privilege Level
firewall—To view this statement in the configuration.
firewall-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos Release 23.4.