subject:"\[j\-nsp\] QFX5100 firewall family ethernet\-switching rules"

Re: [j-nsp] QFX5100 firewall family ethernet-switching rules

2017-05-16 Thread Nitzan Tzelniker

As this is also applied to L2 it might also kill l2 traffic like LACP/ARP ... Try to add another term with then accept in the end of acl1 like you did in acl2 Nitzan On Tue, May 16, 2017 at 11:46 PM, Panny Malialis wrote: > Hi all, > > > I am trying to configure an input filter on a LACP bund

[j-nsp] QFX5100 firewall family ethernet-switching rules

2017-05-16 Thread Panny Malialis

Hi all, I am trying to configure an input filter on a LACP bundle interface but it does not behave as expected. Take the following examples: firewall { family ethernet-switching { filter acl1 { term a { from { ip-protocol icmp;