[j-nsp] IPv6 firewall question

Alex D. listensammler at gmx.de
Mon Jul 2 14:46:44 EDT 2012


Hi guys,

i have a running IPv4 firewall filter for limiting tcp-traceroute. All 
works as desired:

term accept-traceroute-tcp {
     from {
         destination-prefix-list {
             router-v4-addr;
         }
         protocol tcp;
         ttl 1;
     }
     then {
         policer management-1m;
         count accept-traceroute-tcp;
         accept;
     }
}

Now i want to build the same filter for IPv6, but the statement "ttl" is 
not suported within family inet6
Does anybody knows the equivalent for IPv6.

Thanks in advance...
Regards,
Alex


More information about the juniper-nsp mailing list