[j-nsp] Restrict IP usage on specific interface

Hien Phan phanquochien at gmail.com
Fri Mar 17 23:27:00 EDT 2017


Hello,

I'm new to Juniper. Currently I want to restrict allow only packet with
allowed source can send out:

In Cisco IOS:
##
ip access-list standard acl_limit_ip
  permit 172.16.1.100
  deny   any
##


When i come to Juniper, I tried to convert something like below:

##
        filter acl_limit_ip {
            term Permit {
                from {
                    source-address {
                        172.16.1.100/32;
                    }
                }
                then accept;
            }
            term Deny {
                then discard;
            }
##

Really thanks for someone help me figure out the problem.


More information about the juniper-nsp mailing list