[j-nsp] ACL for lo0 template/example comprehensive list of 'things to think about'?

[Olivier Benghozi]

One thing to think about, in IPv6:
On MX, one can use "match protocol" (with Trio / MPC cards).
But it's not supported on lo0 filters, where you were / probably still are restricted to "match next-header", in order to have a filter working as expected.

> Le 11 juil. 2018 à 20:17, Drew Weaver <drew.weaver at thenap.com> a écrit :
> 
> Is there a list of best practices or 'things to think about' when constructing a firewall filter for a loopback on an MX series router running version 15 of Junos?