Switching

Dear Team

Please help me to create two filter and term for the following condition from JunOS router.

1. discard traffic from outside network to a particular port destined for internal public server.
2. discard any traffic from outside network to particular internal public server.

Thanks in advance !!!!

Hi,

Here, for the sake of explanation, I would assume that your internal network is 10.10.10.0/24. If I understood your requirement correctly, we can create the filters in the following way.

1. The term internal in the filter below will allow access for the internal network. The term "external_to_server" will reject the traffic from any other network to the server's IP on a particular port. The term default will accept any other traffic, assuming that you want other traffic to be accepted.

set firewall family inet filter protect_server term internal from source-address 10.10.10.0/24set firewall family inet filter protect_server term internal then acceptset firewall family inet filter protect_server term external_to_server from destination-address <server_address>set firewall family inet filter protect_server term external_to_server from destination-port <server_port>set firewall family inet filter protect_server term external_to_server then rejectset firewall family inet filter protect_server term defaut then accept

2) For the requirement 2, the filter can be created in the same way as the previous filter. The only modification needed is to remove the statement with destination port in the term "external_to_server"

Regards

Dear Team

Please help me to create two filter and term for the following condition from JunOS router.

1. discard traffic from outside network to a particular port destined for internal public server.
2. discard any traffic from outside network to particular internal public server.

Thanks in advance !!!!

I appreciate Mr. Seetanshu the way  you answered my previous question and this one. I managed myself to build the desired filter and term.

One thing I have noticed in an old junos device which I have as a spare a term like " TTL 1 then discard " written inside of a filter.

Can you please describe the meaning of that particular term?

Hi,

Here, for the sake of explanation, I would assume that your internal network is 10.10.10.0/24. If I understood your requirement correctly, we can create the filters in the following way.

1. The term internal in the filter below will allow access for the internal network. The term "external_to_server" will reject the traffic from any other network to the server's IP on a particular port. The term default will accept any other traffic, assuming that you want other traffic to be accepted.

set firewall family inet filter protect_server term internal from source-address 10.10.10.0/24set firewall family inet filter protect_server term internal then acceptset firewall family inet filter protect_server term external_to_server from destination-address <server_address>set firewall family inet filter protect_server term external_to_server from destination-port <server_port>set firewall family inet filter protect_server term external_to_server then rejectset firewall family inet filter protect_server term defaut then accept

2) For the requirement 2, the filter can be created in the same way as the previous filter. The only modification needed is to remove the statement with destination port in the term "external_to_server"

Regards

Dear Team

Please help me to create two filter and term for the following condition from JunOS router.

1. discard traffic from outside network to a particular port destined for internal public server.
2. discard any traffic from outside network to particular internal public server.

Thanks in advance !!!!