[j-nsp] MX80 pfe hardware input drops

Saku Ytti saku at ytti.fi
Fri Jan 31 05:28:14 EST 2014


On (2014-01-31 11:02 +0200), Alexander Kasatkin wrote:

> But I don't have any reject action in firewall rules. Please point me
> to right direction.

This would be any packet which has DADDR pointing to FIB entry with type
'reject'.
In more practical terms, destination to which you don't have route for.

show route forwarding-table family inet table default destination 0.0.0.0/0

In typical DFZ router would be 'rjct'.

-- 
  ++ytti


More information about the juniper-nsp mailing list