JFYI..

http://www.juniper.net/techpubs/en_US/junos10.1/information-products/topic-collections/config-guide-policy/topic-28284.html

""The nonterminating action operations carry a default accept action""


//BR

-----Original Message-----
From: juniper-nsp-boun...@puck.nether.net 
[mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Doug Hanks
Sent: 22 July, 2012 9:12 PM
To: John Neiberger; juniper-nsp@puck.nether.net
Subject: Re: [j-nsp] Why is this term working?

Action modifiers such as count, loss-priority, and forwarding-class implicitly 
imply a terminating action of accept.

Thank you,

--
Doug Hanks - JNCIE-ENT #213,  JNCIE-SP #875 Solutions Architect  EABU Juniper 
Networks


On 7/22/12 10:34 AM, "John Neiberger" <jneiber...@gmail.com> wrote:

>Forgive my Juniper noobiness once again. We have the following term in
>a ingress firewall filter for marking:
>
>term netmgmt {
>    then {
>        count fec-cs2;
>        loss-priority high;
>        forwarding-class MNGMT;
>
>It seems to be working, but I don't know why. If there is no "accept",
>shouldn't it be dropping the traffic? I know the default action is
>accept, but once we use a "then" statement, don't we have to specify
>the accept/reject/discard action? I'm wondering if the
>"forwarding-class" statement has an implied accept or something like
>that. I really have no idea.
>
>Thanks,
>John
>_______________________________________________
>juniper-nsp mailing list juniper-nsp@puck.nether.net
>https://puck.nether.net/mailman/listinfo/juniper-nsp


_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

This message (including any attachments) is intended only for
the use of the individual or entity to which it is addressed and
may contain information that is non-public, proprietary,
privileged, confidential, and exempt from disclosure under
applicable law or may constitute as attorney work product.
If you are not the intended recipient, you are hereby notified
that any use, dissemination, distribution, or copying of this
communication is strictly prohibited. If you have received this
communication in error, notify us immediately by telephone and
(i) destroy this message if a facsimile or (ii) delete this message
immediately if this is an electronic communication.

Thank you.

_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to