Junos OS

 View Only
last person joined: 11 hours ago 

Ask questions and share experiences about Junos OS.
  • 1.  code block juniper firewall

    Posted 03-18-2024 11:36
    [edit firewall filter test ]
     
    term 1 {
    from {
    source-address {
    10.0.0.0/8;
    }
    }
    then {
    log;
    next term;
    }
    }
    term 2 {
    then {
    reject ;
    }
    }
    firweall juniper How is traffic, sourced from 10.0.0.0/8, treated by the firewall filter shown in the exhibit 
      
    logged and rejected
    OR 

    logged and accepted
    i wait expert fw juniper  help me for this question 
    thanks in adavance


    ------------------------------
    Dhikra Marghli
    ------------------------------


  • 2.  RE: code block juniper firewall
    Best Answer

    Posted 03-19-2024 20:13

    The 10.0.0.0/8 traffic will be logged matching term 1 then passed to term two and rejected.

    If term 1 did NOT have the next-term statement no other action would be taken with the traffic as matching a term normally stops processing of that traffic.

    Also note that the default action in a filter if nothing is specified is reject.  Meaning this filter will reject ALL traffic and only the 10.0.0.0/8 is logged.



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: code block juniper firewall

    Posted 03-20-2024 02:47

    ok thanks 



    ------------------------------
    Dhikra Marghli
    ------------------------------