[j-nsp] Disable telnet/ssh access from virtual routers
Stacy W. Smith
stacy at acm.org
Wed Jul 15 12:51:58 EDT 2015
> On Jul 15, 2015, at 10:46 AM, Victor Sudakov <vas at mpeks.tomsk.su> wrote:
>
> Stacy W. Smith wrote:
>> https://kb.juniper.net/InfoCenter/index?page=content&id=KB23547
>>
>> The article states it applies to VRFs, but it also applies to routing instances of type "virtual-router".
>>
>
> This lo0.x interface does not have to have an IP address, does it?
I haven't tested it myself, but I don't believe it has to have an IP address configured. It does have to have family inet/inet6 configured because that's where you apply the filter, but I don't think it has to have an address configured.
--Stacy
More information about the juniper-nsp
mailing list