[j-nsp] Questions about count in firewall filter

Li Zhu lz6 at njit.edu
Thu Jun 18 21:43:26 EDT 2009


All,

In the firewall filter, the counter can count number of packets match the
term. In the simple firewall filter below, the counter AF11_NUM and EF_NUM
can count number packets with af11 and ef, respectively. My question is: can
Cisco achieve similar goal? I know this may be a Cisco question, but I want
to try my luck here also.

Thanks,

Li

firewall {
    filter f1 {
        term t1 {
            from {
                dscp af11;
            }
            then {
                count AF11_NUM;
                accept;
            }
        term t2
           from {
               dscp ef
           then {
                count EF_NUM;
                accept;
           }
        }
    }
}


More information about the juniper-nsp mailing list