Description

The article explains the usage of next term in the firewall filters.

Symptoms

Mis programming of firewall filter might be noticed if the next term itself is the last term in the firewall filter configuration.

Solution

Please avoid using the next term as last term in the firewall filter configuration.


The best practices for using the next term in firewall filters are:


Flow Control: next-term is a non-terminating action, ensuring packet processing continues down the list of terms.

Usage Constraints: A maximum of 1024 next-term actions are supported per configuration.

Unsupported Usage: It cannot be used in the final term of a filter, nor can it be used in a term without any match conditions.

Application: It is configured under the then statement: set firewall filter <filter-name> term <term-name> then next-term. 

Modification History

2026-01-30 : Article Created