Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

close

keyboard_arrow_left

Table of Contents Expand all

play_arrow Subscriber Service Activation and Management
- play_arrow Subscriber Service Activation and Management
play_arrow Configuring Dynamic Class of Service
- play_arrow CoS for Subscriber Access and Interfaces Overview
- play_arrow Configuring Scheduling and Shaping for Subscriber Access
- play_arrow Allocating Dedicated Queues for Each Logical Interface Using Per-Unit Scheduling
- play_arrow Configuring Hierarchical CoS Scheduling on MPLS Ethernet Pseudowire Subscriber Interfaces
- play_arrow Configuring Dedicated Queue Scaling with Hierarchical CoS or Per-Unit Scheduling
- play_arrow Shaping Downstream Traffic Based on Frames or Cells
- play_arrow Applying CoS to Households or Individual Subscribers Using ACI-Based Dynamic VLANs
- play_arrow Applying CoS to Households or Individual Subscribers Using Access Line Identifier Dynamic VLANs
- play_arrow Managing Excess Bandwidth Distribution and Traffic Bursts
- play_arrow Applying CoS Using Parameters Received from RADIUS
- play_arrow Modifying a Subscriber’ s Shaping Characteristics After a Subscriber is Instantiated
- play_arrow Applying CoS to Groups of Subscriber Interfaces
- play_arrow Applying CoS to Subscriber Interfaces
play_arrow Configuring Dynamic Filters and Policers
- play_arrow Dynamic Firewall Filters Overview
  - Understanding Dynamic Firewall Filters
  - Defining Dynamic Filter Processing Order
- play_arrow Configuring Static Firewall Filters That Are Dynamically Applied
- play_arrow Streamlining Processing of Chains of Static Filters
  - Configuring Firewall Filter Bypass
  - Example: Bypassing Firewall Filters
- play_arrow Dynamically Attaching Static or Fast Update Filters to an Interface
  - Dynamically Attaching Statically Created Filters for a Specific Interface Family Type
  - Dynamically Attaching Statically Created Filters for Any Interface Type
- play_arrow Configuring Filters That Are Created Dynamically
- play_arrow Using Ascend Data Filters to Implement Firewalls Based on RADIUS Attributes
- play_arrow Configuring Fast Update Filters to Provide More Efficient Processing Over Classic Static Filters
- play_arrow Defending Against DoS and DDoS Attacks Using Unicast RPF and Fail Filters
  - Unicast RPF in Dynamic Profiles for Subscriber Interfaces
- play_arrow Improving Scaling and Performance of Filters on Static Subscriber Interfaces
  - Firewall Filters and Enhanced Network Services Mode Overview
  - Configuring a Filter for Use with Enhanced Network Services Mode
- play_arrow Configuring Dynamic Service Sets
- play_arrow Configuring Rate-Limiting Premium and Non-Premium Traffic on an Interface Using Hierarchical Policers
- play_arrow Monitoring and Managing Firewalls for Subscriber Access
  - Verifying and Managing Firewall Filter Configuration
  - Enhanced Policer Statistics Overview
play_arrow Configuring Dynamic Multicast
- play_arrow Configuring Dynamic IGMP to Support IP Multicasting for Subscribers
- play_arrow Configuring Dynamic MLD to Enable Subscribers to Access Multicast Networks
  - Dynamic MLD Configuration Overview
play_arrow Configuring Application-Aware Policy Control and Reporting
play_arrow Configuring HTTP Redirect Services
- play_arrow Configuring Captive Portal Content Delivery Services for Redirected Subscribers
play_arrow Configuring Subscriber Secure Policy
- play_arrow Configuring Subscriber Secure Policy Traffic Mirroring Overview
  - Subscriber Secure Policy Overview
- play_arrow Configuring RADIUS-Initiated Subscriber Secure Policy Traffic Mirroring
- play_arrow Configuring DTCP-Initiated Subscriber Secure Policy Traffic Mirroring
- play_arrow Configuring DTCP Messages Used for DTCP-Initiated Subscriber Secure Policy Mirroring
- play_arrow Configuring Subscriber Secure Policy Support for IPv4 Multicast Traffic
  - Subscriber Secure Policy Support for IPv4 Multicast Traffic
  - Enabling Subscriber Secure Policy Mirroring for IPv4 Multicast Traffic
- play_arrow Configuring Intercept-Related Information for Subscriber Secure Policy
play_arrow Configuring Stateless, Rule-Based Services Using Application-Aware Access Lists
- play_arrow AACL Overview
  - AACL Overview
- play_arrow Configuring AACL Rules
  - Configuring AACL Rules
- play_arrow Example: Configuring AACL Rules
  - Example: Configuring AACL Rules
- play_arrow Example: Configuring AACL Rule Sets
  - Configuring AACL Rule Sets
- play_arrow Configuring Logging of AACL Flows
  - Configuring Logging of AACL Flows
play_arrow Remote Device and Service Management
- play_arrow Configuring Remote Device Services Management
- play_arrow Configuring TCP Port Forwarding for Remote Subscriber Services
- play_arrow Configuring IPFIX Mediation for Remote Device Monitoring
  - IPFIX Mediation on the BNG
  - Configuring the BNG as an IPFIX Mediator to Collect and Export IPFIX Data
- play_arrow Collection and Export of Local Telemetry Data on the IPFIX Mediator
  - Telemetry Data Collection on the IPFIX Mediator for Export to an IPFIX Collector
  - Configuring the Collection and Export of Local Telemetry Data on the IPFIX Mediator
play_arrow Troubleshooting
- play_arrow Contacting Juniper Networks Technical Support
  - Collecting Subscriber Access Logs Before Contacting Juniper Networks Technical Support
- play_arrow Knowledge Base
  - Juniper Knowledge Base
play_arrow Configuration Statements and Operational Commands

list Table of Contents

English

keyboard_arrow_right

Configuring Fast Update Filters

date_range 06-Dec-23

arrow_backward

arrow_forward

You configure a fast update filter in a dynamic profile—this enables you to use dynamic variables in the filter configuration. After you configure fast update filters, you then use the dynamic-profiles syntax to associate the filter with the subscriber interface.

To configure a fast update filter for subscriber access:

Access the dynamic profile you want to use.
```
[edit]
user@host# edit dynamic-profiles myProfile
```
Specify that you want to configure a firewall, and specify the family.
```
[edit dynamic-profiles myProfile]
user@host# edit firewall family inet
```
Specify that you want to configure a fast update filter and assign a name to the filter.
```
[edit dynamic-profiles myProfile firewall family inet]
user@host# edit fast-update-filter httpFilter
```

Specify the interface-specific statement. This statement is mandatory.

content_copy zoom_out_map
[edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]
user@host# set interface-specific

Configure the match order to use for the filter terms.

content_copy zoom_out_map
[edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]
user@host# set match-order [source-address protocol destination-port]

See Configuring the Match Order for Fast Update Filters.

Specify that you want to configure a term for the filter and assign the name to the term. Configure the match conditions and actions for the term.

content_copy zoom_out_map
[edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter]
user@host# edit term term1

[edit dynamic-profiles myProfile firewall family inet fast-update-filter httpFilter term term1]
user@host# set from protocol tcp
user@host# set from source-address $junos-subscriber-ip-address
user@host# set from destination-port http
user@host# set then count http-cnt

See Configuring Terms for Fast Update Filters.

arrow_backward PREVIOUS Basic Fast Update Filter Syntax

NEXT arrow_forward Example: Configuring Fast Update Filters for Subscriber Access

footer-navigation