[j-nsp] Why is this term working?

John Neiberger jneiberger at gmail.com
Sun Jul 22 13:34:15 EDT 2012


Forgive my Juniper noobiness once again. We have the following term in
a ingress firewall filter for marking:

term netmgmt {
    then {
        count fec-cs2;
        loss-priority high;
        forwarding-class MNGMT;

It seems to be working, but I don't know why. If there is no "accept",
shouldn't it be dropping the traffic? I know the default action is
accept, but once we use a "then" statement, don't we have to specify
the accept/reject/discard action? I'm wondering if the
"forwarding-class" statement has an implied accept or something like
that. I really have no idea.

Thanks,
John


More information about the juniper-nsp mailing list