[j-nsp] Disable telnet/ssh access from virtual routers

Stacy W. Smith stacy at acm.org
Wed Jul 15 12:51:58 EDT 2015


> On Jul 15, 2015, at 10:46 AM, Victor Sudakov <vas at mpeks.tomsk.su> wrote:
> 
> Stacy W. Smith wrote:
>> https://kb.juniper.net/InfoCenter/index?page=content&id=KB23547
>> 
>> The article states it applies to VRFs, but it also applies to routing instances of type "virtual-router".
>> 
> 
> This lo0.x interface does not have to have an IP address, does it?

I haven't tested it myself, but I don't believe it has to have an IP address configured. It does have to have family inet/inet6 configured because that's where you apply the filter, but I don't think it has to have an address configured.

--Stacy



More information about the juniper-nsp mailing list