[j-nsp] Routing Engine filtering on EX with VRF

Raphael Mazelier raph at futomaki.net
Sat Mar 19 16:02:28 EDT 2016

> On EX, you should be able to protect the RE using a filter on lo0 in the
> main routing instance (not in the VRF itself).
> But be aware that this does not work on tha ACX-series (for some strange
> reason)...

Yep the firewall filter work for interfaces that are on the main 
routing-instance. But for some reason the filter does not apply on 
traffic coming from interface placed in a vrf to the RE.

Raphael Mazelier

More information about the juniper-nsp mailing list