[j-nsp] DSCP field not matched

Saku Ytti saku at ytti.fi
Mon Jun 1 03:28:48 EDT 2020


On Mon, 1 Jun 2020 at 10:23, james list <jameslist72 at gmail.com> wrote:

> Can you share why EX4650 would do the job and EX4300 cannot? Do you have a reference on juniper.com?

Flexible filter allows you to set a bit offset and a value, i.e. you
can match anything you want as long as it is in a predictable offset,
like in your case it is.

https://www.juniper.net/documentation/en_US/junos/topics/concept/firewall-filter-flexible-match-conditions-overview.html

I've previously used a flexible filter to verify if a UDP port is even
or odd, to mirror RTP signalling without mirroring RTP data to comply
with regulatorator while still having debuggability.

--
  ++ytti


More information about the juniper-nsp mailing list