[Contents] [Prev] [Next] [Index] [Report an Error]

Example: Matching Packets Based on Two Unrelated Criteria

Match packets that are either OSPF packets or packets that come from an address in the prefix 10.108/16, and send an administratively-prohibited ICMP message for all packets that do not match:

[edit]
firewall {
family inet {
filter ospf-or-131 {
term protocol-match {
from {
protocol ospf;
}
}
term address-match {
from {
source-address {
10.108.0.0/16;
}
}
}
}
}
}

[Contents] [Prev] [Next] [Index] [Report an Error]