Quantcast
Viewing all articles
Browse latest Browse all 2326

Juniper Ex4200 problem with assign firewall to access port

Hello,

This is my firewall filter rules :

family ethernet-switching {
    filter port5 {
        term port5 {
            from {
                source-address {
                    192.168.1.0/29;
                    192.168.1.240/29;
                }
            }
            then accept;
        }
        term default-term {
            then discard;
        }
    }
}

and this is my port configurations :

description "PORT-Description";
unit 0 {
    family ethernet-switching {
        vlan {
            members vlan3712;
        }
        filter {
            input port5;
        }
    }
}

and this is my ethernet switching options :
ethernet-switching-options {
    secure-access-port {
        interface ge-0/0/5.0 {
            mac-limit 100 action shutdown;
        }
        interface ge-0/0/6.0 {
            mac-limit 100 action shutdown;
        }
    }
    port-error-disable {
        disable-timeout 60;
    }
    storm-control {
        inactive: interface all;
    }
}

the rules working properly and there is only one issue and its when i shutdown(disable) the port and enable (activate) it again that port switch can not learn mac address till i deactive the firewall filter rule and enable it again, whats wrong and what should i edit it?

Thank you.


Viewing all articles
Browse latest Browse all 2326

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>