1.1 交换机交换机 Firewall 限制功能限制功能1.1.1 限制限制 IP 地地/建立过滤策略/指定过滤条件：源 IPset firewall family Ethernet-switching filter ipfilter term 1 from source-address 192.168.1.1/指定过滤符合条件：目的 IPset firewall family Ethernet-switching filter ipfilter term 1 from destination-address 192.168.1.254/指定符合条件的流量所做的动作：accept 或者 discardset firewall family Ethernet-switching filter ipfilter term 1 then accept/指定其它不符合条件的动作set firewall family Ethernet-switching filter ipfilter term 2 discard/将过滤条件应用到端口上 set interface ge-0/0/10 unit 0 family Ethernet-switching filter input ipfilter1.1.2 限制限制 MAC 地址地址/建立过滤策略/指定过滤条件：源 MACset firewall family Ethernet-switching filter macfilter term 1 from source-mac-address aa:aa:aa:aa:aa:aa/指定过滤符合条件：目的 MACset firewall family Ethernet-switching filter macfilter term 1 from destination-mac-address bb:bb:bb:bb:bb:bb/指定符合条件的流量所做的动作：accept 或者 discardset firewall family Ethernet-switching filter macfilter term 1 then accept/指定其它不符合条件的动作set firewall family Ethernet-switching filter macfilter term 2 discard/将过滤条件应用到端口上 set interface ge-0/0/10 unit 0 family Ethernet-switching filter input macfilter