Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
Table 25: IPv4 Firewall Filter Match Conditions (continued)
Match Condition
Description
ttl-except number
Do not match on the IPv4 TTL number. Specify a TTL value or a range of values. For number, you can
specify one or more values from 0 through 255. This match condition is supported only on M120, M320,
MX Series, and T Series routers.
vlan-ether-type value
Virtual local area network (VLAN) Ethernet type field of a VPLS packet.
vlan-ether-type-except
value
Do not match on the VLAN Ethernet type field of a VPLS packet.
Related
Documentation
• How to Specify Firewall Filter Match Conditions on page 220
• Overview of Protocol Match Conditions on page 217
• Overview of Class-Based Match Conditions on page 219
Configuring IPv6 Match Conditions
Table 26 on page 202 describes the firewall filter match conditions supported for IPv6
traffic.
To configure firewall filter match conditions for IPv6 traffic:
• Include the match-conditions statement at the [edit firewall family inet6 filter filter-name
term term-name from] hierarchy level.
Table 26: IPv6 Firewall Filter Match Conditions
Match Condition
Description
address address
128-bit address that supports the standard syntax for IPv6 addresses. For more information, see the
Junos OS Routing Protocols Configuration Guide.
destination-address
address
128-bit address that is the final destination node address for the packet. The filter description syntax
supports the text representations for IPv6 addresses as described in RFC 2373, IP Version 6 Addressing
Architecture. For more information about IPv6 address syntax, see the Junos OS Routing Protocols
Configuration Guide.
202
Copyright © 2010, Juniper Networks, Inc.