Verifying a Services, Protocols, and Trusted Sources Firewall Filter

Purpose

Verify the stateless firewall filter configured in Configuring a Routing Engine Firewall Filter for Services and Protocols from Trusted Sources.

Action

To verify that the actions of the firewall filter terms are taken, send packets to the Services Router that match the terms. In addition, verify that the filter actions are not taken for packets that do not match.

• Use the ssh host-name command from a host at an IP address that matches 192.168.122.0/24 to verify that you can log in to the Services Router using only SSH from a host with this address prefix.
• Use the show route summary command to verify that the routing table on the Services Router does not contain any entries with a protocol other than Direct, Local, BGP, or Static.

%ssh host
user@host's password: 
--- JUNOS 6.4-20040518.0 (JSERIES) #0: 2004-05-18 09:27:50 UTC

user@host>

Router ID: 192.168.249.71

inet.0: 34 destinations, 34 routes (33 active, 0 holddown, 1 hidden)
              Direct:     10 routes,      9 active
               Local:      9 routes,      9 active
                 BGP:     10 routes,     10 active
              Static:      5 routes,      5 active
...

What it Means

Verify the following information:

• You can successfully log in to the Services Router using SSH.
• The show route summary command does not display a protocol other than Direct, Local, BGP, or Static.

See Also