Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
to other filters. To make changes to the common desired terms, you need to make term
modifications only to the filter with the common terms instead of changing terms on
every filter.
To configure a filter within a filter, include the filter statement at the [edit firewall filter
inet filter-name term term-name] hierarchy level:
term term-name {
filter filter-name;
}
A filter within a filter cannot reference yet another filter. For example, the following
configuration is not valid:
[edit]
firewall {
filter filter-name {
term t1 {
filter filter-name2 {
term t2 {
filter filter-name3;
}
}
}
}
}
You cannot configure the from or then statement under the same filter term that
references a filter within a filter. For example, the following configuration is not valid:
[edit]
firewall {
filter filter-name {
term t1 {
filter filter-name2 {
then {
accept;
}
}
}
}
}
Example: Configuring Nested Filters
The maximum number of filters within a filter is limited to 256.
Define a filter common-filter and configure it into two separate filters:
[edit]
firewall {
filter common-filter {
term t1 {
from {
protocol udp;
port tftp;
}
234
Copyright © 2010, Juniper Networks, Inc.