[j-nsp] RE filter BCP

Saku Ytti saku at ytti.fi
Fri Jan 4 08:47:26 EST 2019


On Fri, 4 Jan 2019 at 15:33, Jason Lixfeld <jason-jnsp at lixfeld.ca> wrote:

> In Cisco land, for management, one puts a filter on the VTY range, and also include the vrf-also keyword where required.  Does JunOS have similar functionality, or would you need to put the filter on the fxp0/em0/whatever out-of-band management interface you’re using, or the in-band management lo0 unit, depending on the user’s desired management implementation.

Unless there is 'more specific' loopback filter, all VRF consult INET lo0.0.

If you configure lo interface for some VRF, then that VRF consults its
own lo interface filter.

-- 
  ++ytti


More information about the juniper-nsp mailing list