[j-nsp] When will ASM/ASPIC configuration gain prefix lists?

Michael Loftis mloftis at wgops.com
Thu Mar 2 13:10:12 EST 2006



--On March 2, 2006 11:00:44 AM -0700 Michael Loftis <mloftis at wgops.com> 
wrote:

>
>
> --On March 1, 2006 12:20:49 PM +0300 Alexander Tarkhov
> <karabass at gmail.com>  wrote:
>
>> Hi Michael,
>>
>> Looks like you are trying to use the simplest way of configuring it.
>> However there is a more complex way which is much more flexible.
>> Try to look at service-filters
>>
>> [edit firewall family inet service-filter filter-name term term-name
>> from]
>>
>> I think there you can reference prefix-list.
>> Also you can take
>> "then service" or "then skip"
>> as an action for selected traffic.

Actually upon further inspection this isn't at all what I need.  I don't 
need to simply select which packets get service processed, I need to select 
packets from specific sets of addresses for different processing.  the 
service-filter service statement doesn't do anything for me there.


More information about the juniper-nsp mailing list