[j-nsp] When will ASM/ASPIC configuration gain prefix lists?
Michael Loftis
mloftis at wgops.com
Thu Mar 2 13:10:12 EST 2006
--On March 2, 2006 11:00:44 AM -0700 Michael Loftis <mloftis at wgops.com>
wrote:
>
>
> --On March 1, 2006 12:20:49 PM +0300 Alexander Tarkhov
> <karabass at gmail.com> wrote:
>
>> Hi Michael,
>>
>> Looks like you are trying to use the simplest way of configuring it.
>> However there is a more complex way which is much more flexible.
>> Try to look at service-filters
>>
>> [edit firewall family inet service-filter filter-name term term-name
>> from]
>>
>> I think there you can reference prefix-list.
>> Also you can take
>> "then service" or "then skip"
>> as an action for selected traffic.
Actually upon further inspection this isn't at all what I need. I don't
need to simply select which packets get service processed, I need to select
packets from specific sets of addresses for different processing. the
service-filter service statement doesn't do anything for me there.
More information about the juniper-nsp
mailing list