Policy Framework Configuration Guide - Juniper Networks

Chapter 9: Firewall Filter Configuration
Unsupported Configuration Statements, Actions, and Action Modifiers
Table 36 on page 263 lists statements that are supported at the [edit firewall] hierarchy
level but not at the [edit logical-systems logical-system-name firewall] hierarchy level.
Table 36: Unsupported Firewall Statements for Logical Systems
Statement
Example
Description
accounting-profile
[edit]
logical-systems {
ls1 {
firewall {
family inet {
filter myfilter {
accounting-profile fw-profile;
...
term accept-all {
then {
count counter1;
accept;
}
}
}
}
}
}
}
In this example, the accounting-profile
statement is not allowed because the
accounting profile fw-profile is
configured under the [edit
accounting-options] hierarchy.
load-balance-group
[edit]
logical-systems {
ls1 {
firewall {
load-balance-group lb-group {
next-hop-group nh-group;
}
}
}
}
This configuration is not allowed
because the next-hop-group nh-group
statement must be configured at the
[edit forwarding-options
next-hop-group] hierarchy
level—outside the [edit logical-systems
logical-system-name firewall] hierarchy.
Currently, the forwarding-options
dhcp-relay statement is the only
forwarding option supported for logical
systems.
Copyright © 2010, Juniper Networks, Inc.
263