Policy Framework Configuration Guide - Juniper Networks

Junos 10.4 Policy Framework Configuration Guide
Table 37: Unsupported Firewall Actions and Action Modifiers for Logical Systems (continued)
Action or Action
Modifier
Example
Description
next-hop-group
[edit]
logical-systems {
ls1 {
firewall {
family inet {
filter foo {
term one {
from {
source-address 10.1.0.0/16;
}
then {
next-hop-group fred;
}
}
}
}
}
}
}
Because the next-hop-group action
refers to fred, an object defined at the
[edit forwarding-options
next-hop-group] hierarchy level, this
action is not supported.
port-mirror
[edit]
logical-systems {
ls1 {
firewall {
family inet {
filter foo {
term one {
from {
source-address 10.1.0.0/16;
}
then {
port-mirror;
}
}
}
}
}
}
}
Because the port-mirror action relies
on a configuration defined at the [edit
forwarding-options port-mirroring]
hierarchy level, this action is not
supported.
266
Copyright © 2010, Juniper Networks, Inc.