Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
Table 35: Firewall Filter Actions
Action
Description
accept
Accept a packet.
count
counter-name
Count the packet in the specified counter.
discard
Discard a packet silently, without sending an Internet Control Message Protocol (ICMP) message. Discarded
packets are available for logging and sampling.
dscp value
(Family inet only) Set the IPv4 Differentiated Services code point (DSCP) bit. You can specify a numerical
value from 0 through 63. To specify the value in hexadecimal form, include 0x as a prefix. To specify the
value in binary form, include b as a prefix.
The default DSCP value is best effort, that is, be or 0.
You can also specify on the following text synonyms:
• af11—Assured forwarding class 1, low drop precedence
• af12—Assured forwarding class 1, medium drop precedence
• af13—Assured forwarding class 1, high drop precedence
• af21—Assured forwarding class 2, low drop precedence
• af22—Assured forwarding class 2, medium drop precedence
• af23—Assured forwarding class 2, high drop precedence
• af31—Assured forwarding class 3, low drop precedence
• af32—Assured forwarding class 3, medium drop precedence
• af33—Assured forwarding class 3, high drop precedence
• af41—Assured forwarding class 4, low drop precedence
• af42—Assured forwarding class 4, medium drop precedence
• af43—Assured forwarding class 4, high drop precedence
• be—Best effort
• cs0—Class selector 0
• cs1—Class selector 1
• cs2—Class selector 2
• cs3—Class selector 3
• cs4—Class selector 4
• cs5—Class selector 5
• cs6—Class selector 6
• cs7—Class selector 7
• ef—Expedited forwarding
NOTE: The actions dscp 0 or dscp be are supported only on T Series and M320 routers and on the 10-Gigabit
Ethernet Modular Port Concentrators (MPC), 60-Gigabit Ethernet MPC, 60-Gigabit Ethernet Queuing MPC,
and 60-Gigabit Ethernet Enhanced Queuing MPC on MX Series routers. However, these actions are not
supported on Enhanced III Flexible PIC Concentrators (FPCs) on M320 routers.
forwarding-class
class
Classify the packet into one of the following forwarding classes: as, assured-forwarding, best-effort,
expedited-forwarding, or network-control.
228
Copyright © 2010, Juniper Networks, Inc.