Hello everyone.
Im facing a problem - i need to color traffic on specific vlans on my QFX5110 switch. As i can see, i can make it two ways:
1. i`m applying firewall filter to unit ( which is unit 0, cause i use only ethernet-switching) to every port.
2. i`m doing like that, applying FF to vlans->forwarding options:
#show configuration firewall family ethernet-switching filter AF
term SET-AF {
then {
accept;
forwarding-class assured-forwarding;
loss-priority low;
}
}
# show vlans TEST
vlan-id 205;
forwarding-options {
filter {
input AF;
}
flood {
input AF;
}
}
which looks much better in my opinion.
So the question: is it ok to apply FF to forwarding-options inside vlan on QFX5k?