[Contents] [Prev] [Next] [Index] [Report an Error]

Example: Accepting DHCP Packets with Specific Addresses

Configure a filter (rpf-dhcp) that accepts DHCP packets with a source address of 0.0.0.0 and a destination address of 255.255.255.255:

[edit firewall family inet]
filter rpf-dhcp {
term dhcp {
from {
source-address {
0.0.0.0/32;
}
destination-address {
255.255.255.255/32;
}
}
then {
accept;
}
}
}

To apply this filter to an interface, include the rpf-check fail-filter statement at the [edit interface interface-name unit logical-unit-number family family-name] hierarchy level:

[edit interface interface-name unit logical-unit-number family inet]
rpf-check fail-filter rpf-dhcp;

[Contents] [Prev] [Next] [Index] [Report an Error]