Junos OS

Expand all | Collapse all

Firewall filter

Jump to Best Answer
  • 1.  Firewall filter

    Posted 01-10-2019 01:33

    Could someone explain to me the difference between the following:


    Configuring a firewall filter under "set firewall filter"




    Configuring a firewall filter under "set firewall family inet filter"



  • 2.  RE: Firewall filter
    Best Answer

    Posted 01-10-2019 01:42



    As the name suggests, "set firewall filter <name>" is for v4(inet) alone where as "set firewall family <any, bridge, ccc, evpn, inet, inet6,mpls,vpls>" give you wide range of family options.



    jtac-mx960-re0# set firewall ?         
    Possible completions:
    + apply-groups         Groups from which to inherit configuration data
    + apply-groups-except  Don't inherit configuration data from these groups
    > atm-policer          Atm policer
    > family               Protocol family
    > filter               Define an IPv4 firewall filter


    jtac-mx960-re0# set firewall family ?
    Possible completions:
    > any                  Protocol-independent filter
    > bridge               Protocol family BRIDGE for firewall filter
    > ccc                  Protocol family CCC for firewall filter
    > evpn                 Protocol family EVPN for firewall filter
    > inet                 Protocol family IPv4 for firewall filter
    > inet6                Protocol family IPv6 for firewall filter
    > mpls                 Protocol family MPLS for firewall filter
    > vpls                 Protocol family VPLS for firewall filter





  • 3.  RE: Firewall filter

    Posted 01-10-2019 01:43

    Hi Kharan,


    Thank you.


    Yes, I jumped the gun a little asking the question as I just found the answer out.


    Family inet filter and firewall filter are the equivelant for IPv4.