Quantcast
Channel: Ethernet Switching topics
Viewing all articles
Browse latest Browse all 2326

Firewall filter for ethernet-switching issue

$
0
0

Hi,

I have a couple of access-ports in a vlan (on an EX3300 running 12.3R7.7, one particular port should only allow traffic from specific ip-addresses.

I thought that would be straight forward so i configured it like this:

> show configuration firewall family ethernet-switching filter server-oob
term oob-access {
    from {
        source-address {
            10.146.77.15/32;
            172.16.18.44/32;
        }
    }
    then accept;
}> show configuration interfaces ge-1/0/26
description "Server OOB";
unit 0 {
    family ethernet-switching {
        port-mode access;
        vlan {
            members s-oob;
        }
        filter {
            output server-oob;
        }
    }
}

So the servers OOB port is connected to ge-1/0/26 and the addresses that should be allowed access to that interface is coming from other vlans.

When i commit this all traffic stops to that interface, why is that? And why is the traffic from the specific addresses not allowed?

 

If i remove the filter on the port, traffic flows fine.

 

Kind Regards


Viewing all articles
Browse latest Browse all 2326

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>