Filter action: De-encapsulation: IPv4 and IPv6 unicast traffic encapsulated in IPv4 IP-in-IP tunnels

Junos OS supports decapsulating IPv4 and IPv6 unicast traffic that has been encapsulated in IPv4 IP-in-IP tunnels using firewall filters. If the outer IPv4 header address matches the firewall configuration and the packet has ipip set as the protocol type, then the outer IPv4 header is removed and the packet is routed based on the inner IPv4 or IPv6 address. If the packet does not have the expected ipip header, the packet is dropped. Configure this feature using the following CLI statements at the [edit firewall family inet filter filter-name term term-name] hierarchy.