output-chain

Syntax

Hierarchy Level

Description

The output-chain command works like the next filter term to allow multiple levels of filtering on the interface in both the ingress and egress direction. For example, you can implement a combination of classification and firewall filter rules for evaluation, wherein the first filter performs a generic filter classification and the subsequent filters go on to perform the actual filtering and actions.

To continue on to the next filter, the terminating action in the current filter must be accept.

The output-chain command is supported on all interfaces except loopback (lo0 and fxp0) and interfaces under logical systems.

Options

[ filter-names ]—Name of each filter in the chain that is to be evaluated when packets are received on the interface. Supports up to 8 ingress and 8 egress filters. Evaluation occurs in the order in which the names appear, from left to right.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 18.4R1.

Statement introduced in Junos OS Evolved Release 21.4R1 (PTX10001-36MR, PTX10004, PTX10008, and PTX10016).