Which two parameters are considered action modifiers in the firewall filter's then statement? (Choose two.)
Which two parameters are considered action modifiers in the firewall filter's then statement? (Choose two.)
The two parameters considered action modifiers in the firewall filter's then statement are 'policer' and 'count'. The 'policer' parameter applies rate limiting to the traffic that matches the filter's term, imposing bandwidth constraints on the matched traffic. The 'count' parameter increments a counter each time traffic matches the filter's term, allowing for monitoring and logging the number of packets that match without altering the action taken on them.
Ref: Firewall Filter Match Conditions, Actions, and Action Modifiers for EX Series Switches | Junos OS | Juniper Networks "Firewall Filter Match Conditions, Actions, and Action Modifiers for EX Series Switches ... Action Modifiers for Firewall Filters ... Table 4: Action Modifiers for Firewall Filters ... count [counter-name] - Count the number of packets that pass this filter, term, or policer. A policer enables you to specify rate limits on traffic that enters an interface on a switch. ... policer [policer-name] - Apply rate limits to the traffic. ..."
agreed B D
Answer B D
B. Policer: The 'policer' parameter in a firewall filter's 'then' statement is considered an action modifier because it applies rate limiting to the traffic that matches the filter's term. A policer enforces bandwidth limits on the matched traffic, allowing you to control the rate of specific types of traffic. D. Count: The 'count' parameter in a firewall filter's 'then' statement is considered an action modifier because it increments a counter each time traffic matches the filter's term. This allows you to keep track of the number of packets that match the filter term without affecting the action taken on the matched traffic.
he two parameters considered action modifiers in the firewall filter's then statement are: B. policer: Specifies a policing action to enforce a specific rate limit or bandwidth allocation for the matched traffic. D. count: Increments a packet and byte counter for the matched traffic without taking any further action. It can be used for monitoring and logging purposes. The other options are not action modifiers: A. next term: This is used to continue processing the filter's subsequent terms if the current term does not match. C. reject: This is used to generate an ICMP "destination unreachable" message and drop the packet.