Firewall Filters Flashcards

In a Junos firewall filter term, which keyword introduces the match conditions for the term?

Answer: from

The 'from' clause in a Junos firewall filter term defines the match conditions that a packet must satisfy for the term's actions to be applied.

What does the 'then' clause in a Junos firewall filter term specify?

Answer: The actions to take when the match conditions are satisfied

The 'then' clause defines the actions (such as accept, discard, reject, or count) that are applied when a packet matches the term's 'from' conditions.

Which match condition in a Junos inet firewall filter is used to match packets based on the IP protocol number or name?

Answer: protocol

The 'protocol' match condition in a Junos inet filter matches packets based on the IP protocol field, such as tcp, udp, or icmp.

Where must a Junos firewall filter be applied to inspect inbound packets arriving on a specific interface?

Answer: Under the 'input' direction of the interface

To inspect packets as they arrive on an interface, the filter must be applied in the 'input' direction under that interface's logical unit.

Which firewall filter action causes Junos to evaluate the current packet against the next term in the filter rather than stopping?

Answer: next term

The 'next term' action in a Junos firewall filter causes evaluation to move to the following term without accepting or discarding the packet.

What is the role of a policer when referenced within a Junos firewall filter term?

Answer: It enforces a rate limit on traffic matching the term's conditions

A policer referenced in a firewall filter term enforces bandwidth limits on matching traffic, dropping or remarking packets that exceed the configured rate.

Which address family must be configured when creating a Junos firewall filter that matches IPv4 packets?

Answer: family inet

IPv4 firewall filters in Junos must be configured under 'family inet' in the firewall hierarchy.