enhanced-mode-override
Syntax
enhanced-mode-override;
Hierarchy Level
[edit dynamic-profiles profile-name firewall family family-name filter filter-name], [edit firewall filter filter-name], [edit firewall family family-name filter filter-name], [edit logical-systems logical-system-name firewall filter filter-name], [edit logical-systems logical-system-name firewall family family-name filter filter-name]
Description
Overrides the default filter enhanced-mode of dynamic service filters when the chassis is running in network-services enhanced IP mode. It functions similarly to the enhanced-mode statement used to override the default IP mode of static filters when the chassis is running in network-services enhanced IP mode.
When the chassis is running in network-service enhanced IP mode,
all dynamic service inet and inet6 firewall filters are automatically
generated in term-based filter format only. For any dynamic service
filter that must be generated in both term-based and compiled formats,
you must specifically configure the enhanced-mode-override statement for that filter definition.
Similar to how the filter enhanced-mode statement functions, if the chassis is not running in network-services
enhanced IP mode, then the enhanced-mode-override statement is ignored.
The enhanced-mode and the enhanced-mode-override statements are mutually exclusive;
you can define the filter with either enhanced-mode or enhanced-mode-override, but not both.
Required Privilege Level
firewall—To view this statement in the configuration.
firewall-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 12.2.