[j-nsp] J-Series: filtering only RE-bound traffic?
Diogo Montagner
diogo.montagner at gmail.com
Thu Sep 16 07:35:13 EDT 2010
You can do cos classification for the outbound traffic.
I never tried do filtering for outbound. But you can use an
apply-group for all interfaces.
Rgs
On 9/16/10, Jonathan Lassoff <jof at thejof.com> wrote:
> I'm trying to setup some filtering on my loopback and WAN interfaces
> to only filter RE-bound traffic.
>
> I'm doing this by applying a "filter input" term to the iff-level
> (interface xxx unit xxx family [inet/inet6]), but this filter seems to
> also catch traffic being forwarded from the WAN interfaces, so the
> filter is affecting downstream traffic as well.
>
> On platforms I've used in the past (M and MX -- "real" PFEs), these
> filter terms only catch locally-bound traffic and not things
> transiting the router. Is there a way to do some sort of similar
> classification on J-series as well?
>
> I have my box configured with the included "router" mode template
> (packet-based forwarding, all interfaces in a trusted security zone,
> etc.)
>
> Cheers,
> jof
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
--
Sent from my mobile device
./diogo -montagner
More information about the juniper-nsp
mailing list