Re: [j-nsp] EX4650 - loopback filter - ospf

2023-03-21 Thread Chriztoffer via juniper-nsp
On Tue, 21 Mar 2023 at 10:29, Laurent CARON via juniper-nsp wrote: > set firewall family inet filter filter-management term accept-ospf from > protocol ospf > set firewall family inet filter filter-management term accept-ospf then > count filter-management-accept-ospf > set firewall family inet fi

Re: [j-nsp] EX4650 - loopback filter - ospf

2023-03-21 Thread Cristian Cardoso via juniper-nsp
No, I use MX's and QFX''s and EX these days. Em ter., 21 de mar. de 2023 às 08:05, Laurent CARON < lca...@unix-scripts.info> escreveu: > Thanks Cristian, > > Not specifing source should work since this rule is supposed to be wider. > > I think my question is EX4650 specific. Do you use the EX4650

Re: [j-nsp] EX4650 - loopback filter - ospf

2023-03-21 Thread Laurent CARON via juniper-nsp
Thanks Cristian, Not specifing source should work since this rule is supposed to be wider. I think my question is EX4650 specific. Do you use the EX4650 platform ? Thanks Le 21/03/2023 à 11:38, Cristian Cardoso a écrit : Hi Here I use "from prefix-list", from what I understand from Juniper,

Re: [j-nsp] EX4650 - loopback filter - ospf

2023-03-21 Thread Cristian Cardoso via juniper-nsp
Hi Here I use "from prefix-list", from what I understand from Juniper, when "from destination-prefix-list" is inserted it is as if it were an IP on the internal interface of the network and not an IP source IP filter and the "from prefix-list" is more like source address. set firewall family inet

[j-nsp] EX4650 - loopback filter - ospf

2023-03-21 Thread Laurent CARON via juniper-nsp
Hi, I'm currently migrating EX4500 to EX4650. Our loopback filter taken from EX4500 to EX4650 doesn't behave as expected. Our lo0 filter looks like: set interfaces lo0 unit 0 family inet filter input filter-management set firewall family inet filter filter-management term ALLOW_SSH from source