Enhancements to support log and syslog firewall filter actions

Junos OS supports log and syslog firewall filter actions in ingress and egress directions for family inet and family bridge protocol families. 

The following limitations apply: 

• Broadcast, unknown unicast, and multicast (BUM) traffic is not logged for family bridge and family inet filters in egress direction. 
• For egress log and syslog actions, DSCP, TTL, and IEEE 802.1p bits are matched based on ingress values. 
• For familyinet, the log and syslog filter actions do not work at egress if a packet is forwarded through the default route entry to egress. 
• For family bridge, the log and syslog filter actions do not work at egress if the filter term contains user-vlan-id, user-vlan-pri, and user-vlan-dei match conditions. 
• For family bridge and family inet, if a packet hits log or syslog actions on both the ingress and egress directions, only one log and one syslog message are recorded. 
• For family inet, if a packet hits reject action on ingress, the packet is not logged on the egress filter action.