Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
Table 32 on page 210 describes the firewall filter match conditions supported for VPLS.
For more information about how to configure Layer 2 services on the MX Series routers,
see the Junos OS Network Interfaces Configuration Guide, the Junos Layer 2 Configuration
Guide, and the Junos OS MX Series Ethernet Services Routers Solutions Guide.
Table 32: VPLS Firewall Filter Match Conditions
Match Condition
destination
mac-address address
Description
Destination media access control (MAC) address of a VPLS packet.
destination-port
number
(MX Series routers only) TCP or UDP destination port field. You cannot specify both the port and
destination-port match conditions in the same term.
destination-port-except
number
(MX Series routers only) Do not match on the TCP or UDP destination port field. You cannot specify
both the port and destination-port match conditions in the same term.
destination-prefix-list
name
(MX Series routers only) Destination prefixes in the specified list name. Specify the name of a prefix list
defined at the [edit policy-options prefix-list prefix-list-name] hierarchy level.
NOTE: VPLS prefix lists support only IPV4 addresses. IPV6 addresses included in a VPLS prefix list will
be discarded.
dscp number
(MX Series routers only) Differentiated Services code point (DSCP). The DiffServ protocol uses the
type-of-service (ToS) byte in the IP header. The most significant 6 bits of this byte form the DSCP. For
more information, see the Junos OS Class of Service Configuration Guide.
You can specify a numeric value from 0 through 63. To specify the value in hexadecimal form, include
0x as a prefix. To specify the value in binary form, include b as a prefix.
In place of the numeric value, you can specify one of the following text synonyms (the field values are
also listed):
• RFC 3246, An Expedited Forwarding PHB (Per-Hop Behavior), defines one code point: ef (46).
• RFC 2597, Assured Forwarding PHB Group, defines 4 classes, with 3 drop precedences in each class,
for a total of 12 code points:
af11 (10), af12 (12), af13 (14),
af21 (18), af22 (20), af23 (22),
af31 (26), af32 (28), af33 (30),
af41 (34), af42 (36), af43 (38)
dscp-except number
(MX Series routers only) Do not match on the DSCP.
ether-type number
Ethernet type field of a VPLS packet.
ether-type-except
number
Do not match on the Ethernet type field of a VPLS packet.
forwarding-class
class
Forwarding class. Specify assured-forwarding, best-effort, expedited-forwarding, or network-control.
210
Copyright © 2010, Juniper Networks, Inc.