Policy Framework Configuration Guide - Juniper Networks

Chapter 9: Firewall Filter Configuration
Table 37: Unsupported Firewall Actions and Action Modifiers for Logical Systems (continued)
Action or Action
Modifier
Example
Description
ipsec-sa
[edit]
logical-systems {
ls1 {
firewall {
family inet {
filter foo {
term one {
from {
source-address 10.1.0.0/16;
}
then {
ipsec-sa barney;
}
}
}
}
}
}
}
Because the ipsec-sa action modifier
references barney, a security
association defined outside the local
logical system, this action is not
supported.
logical-system
[edit]
logical-systems {
ls1 {
firewall {
family inet {
filter foo {
term one {
from {
source-address 10.1.0.0/16;
}
then {
logical-system fred;
}
}
}
}
}
}
}
Because the logical-system action
refers to fred, a logical system defined
outside the local logical system, this
action is not supported.
Copyright © 2010, Juniper Networks, Inc.
265