Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
family inet {
filter router-alert {
term 10 {
from {
ip-options any;
}
then {
count option-any;
discard;
}
}
term 999 {
then accept;
}
}
}
Example: Accepting OSPF Packets from Certain Addresses
Accept only OSPF packets from an address in the prefix 10.108.0.0/16, discarding all
other packets with an administratively-prohibited ICMP message:
[edit]
firewall {
family inet {
filter ospf-filter {
term term1 {
from {
source-address {
10.108.0.0/16;
}
protocol ospf;
}
}
term default-term {
then {
reject administratively-prohibited; # default reject action
}
}
}
}
}
Example: Matching Packets Based on Two Unrelated Criteria
Match packets that are either OSPF packets or packets that come from an address in
the prefix 10.108/16, and send an administratively-prohibited ICMP message for all packets
that do not match:
[edit]
firewall {
family inet {
filter ospf-or-131 {
term protocol-match {
from {
248
Copyright © 2010, Juniper Networks, Inc.