Policy Framework Configuration Guide - Juniper Networks

Chapter 9: Firewall Filter Configuration
reject;
}
}
term group-2 {
then {
count if-group-counter2;
log;
accept;
}
}
}
}
Assign one or more interfaces to the interface group referenced in the filter:
[edit interfaces]
fxp0 {
unit 0 {
family inet {
filter {
group 1;
}
address 192.168.5.38/24;
}
}
}
Apply the filter that contains an interface group:
Overview of Firewall Filter Lists
[edit interfaces]
lo0 {
unit 0 {
family inet {
filter {
input if-group;
group 1;
}
address 10.0.0.1/32;
address 192.168.77.1/32;
}
}
}
Firewall filter lists effectively enable you to chain multiple firewall filters and apply them
to a single interface. Typically, you apply a single firewall filter to an interface in the input
or output direction or both. The ability to chain multiple firewall filters is useful when you
have a router configured with many, even hundreds of interfaces, and you want to apply
a unique filter to each interface but also apply a common set of terms to many or most
of the interfaces on the router.
The most straightforward way to chain multiple firewall filter is to configure multiple,
separate firewall filters. In such a scenario, you can configure multiple filters that are
each unique to one interface and one or more separate filters that include the common
Copyright © 2010, Juniper Networks, Inc.
239