Juniper Networks JUNOS OS 10.4 User Manual

Page 126

Example: Configuring Filtering of Frames by IEEE 802.1p Bits

For the

bridge

and

vpls

protocol families only, MX Series router firewall filters can be

configured to provide matching on IEEE 802.1p priority bits in packets with VLAN tagging:

•

To configure a firewall filter term that includes matching on IEEE 802.1p learned VLAN
priority (in the outer VLAN tag), use the

learn-vlan-1p-priority

learn-vlan-1p-priority-except

match condition.

•

To configure a firewall filter term that includes matching on IEEE 802.1p user priority
(in the inner VLAN tag), use the

user-vlan-1p-priority

user-vlan-1p-priority-except

match condition.

For more detailed information about configuring firewall filters and configuring filter
match conditions for Layer 2 bridging traffic on the MX Series routers, see the Routing
Policy Configuration Guide.

NOTE:

Layer 2 bridging is supported only on the MX Series routers. For more

information about how to configure Layer 2 bridging, see the Routing Policy
Configuration Guide, the Junos OS Routing Protocols Configuration Guide,
and the Junos OS Feature Guides.

This example Layer 2 bridging firewall filter finds any incoming frames with an IEEE 802.1p
learned VLAN priority level of either 1 or 2, and then classifies the packet in the

best-effort

default forwarding class.

NOTE:

This example does not present exhaustive configuration listings for

all routers in the figures. However, you can use this example with a broader
configuration strategy to complete the MX Series router network Ethernet
Operations, Administration, and Maintenance (OAM) configurations.

To configure filtering of frames by IEEE 802.1p bits:

Configure the firewall filter

filter-learn-vlan-configure-forwarding

[edit firewall]
family bridge {

filter filter-learn-vlan-configure-forwarding {

term 0 {

from {

learn-vlan-1p-priority [1 2];

}
then forwarding-class best-effort;

}

106

Junos OS 13.1 MX Series 3D Universal Edge Routers Solutions Guide