Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
How to Specify Firewall Filter Match Conditions
Because firewall filter match conditions can match a variety of criteria, including packet
fields and IP addresses, you can specify the following types of values in a single match
condition:
• Numeric value or range of values
• Single text value or multiple text values
• Multiple numeric and text values
• Single prefix value or multiple prefix values
• Single bit-field value
• Multiple bit-field values using logical operators
This topic covers:
• Numeric and Text Values in Match Conditions on page 220
• Prefixes in Match Conditions on page 221
• Bit-Field Values in Match Conditions on page 224
Numeric and Text Values in Match Conditions
Numerous match conditions can be configured with numeric or text values or a
combination of the two.
Numeric Values
You can specify numeric values in one of the following ways:
• Single number. A match occurs if the value of the field matches the number. For
example:
source-port 25;
• Range of numbers. A match occurs if the value of the field falls within the specified
range. The following example matches source ports 1024 through 65,535, inclusive:
source-port 1024-65535;
Text Values
You can specify a text value as a synonym for a numeric value. A match occurs if the
value of the field matches the number that corresponds to the synonym. For example:
source-port smtp;
A match occurs if the value of the field is 25 because that numeric value corresponds to
the text synonym smtp.
Multiple Numeric and Text Values
220
Copyright © 2010, Juniper Networks, Inc.