Juniper Networks 10.4 Example:Configuring Filtering of Frames by IEEE 802.1p Bits

countevil-mac-address; # Counts frame with the bad sourceMAC address
discard;
}
termtwo {
thenaccept; # Make sure to acceptother traffic
}
}
}
}
2. Applyevil-mac-address as an input filter to vlan100200on Router 1:
[editrouting-instances]
virtual-switch-R1-1{
bridge-domains{
vlan100200{
domain-typebridge;
forwarding-options{
filter{
inputevil-mac-address;
}
}
}
}
}
Related
Documentation
MXSeries Ethernet Services Routers SolutionsPage•
•FirewallFilters for Bridge Domains and VPLS Instanceson page 95
•Example:Configuring Policing and Marking of TrafficEntering a VPLS Core on page96
•Example:Configuring Filtering of Frames by IEEE 802.1pBits on page 99
•Example:Configuring Filtering of Frames by PacketLoss Priority on page 101
Example:Configuring Filtering of Frames by IEEE 802.1p Bits
Forthe bridge and vpls protocol families only,MX Series router firewall filters can be
configuredto provide matching on IEEE 802.1ppriority bits in packets with dual VLAN
tags:
•Toconfigurea firewall filter term that includes matchingon IEEE 802.1p learned VLAN
priority(in the outer VLAN tag), use the learn-vlan-1p-priority or
learn-vlan-1p-priority-exceptmatch condition.
•Toconfigure a firewallfilter term that includes matching on IEEE 802.1puser priority
(inthe inner VLAN tag), use the user-vlan-1p-priority or user-vlan-1p-priority-except
matchcondition.
Formore detailed information about configuring firewallfilters and configuring filter
matchconditions for Layer 2 bridging trafficon the MX Series routers, see the Junos OS
PolicyFramework Configuration Guide.
99Copyright© 2010, Juniper Networks,Inc.
Chapter9: Layer 2 FirewallFilters