Technical Documentation

Example: Accepting DHCP Packets with Specific Addresses

Configure a filter (rpf-dhcp) that accepts DHCP packets with a source address of 0.0.0.0 and a destination address of 255.255.255.255:

[edit firewall family inet]filter rpf-dhcp {term dhcp {from {source-address {0.0.0.0/32;}destination-address {255.255.255.255/32;}}then {accept;}}}

To apply this filter to an interface, include the rpf-check fail-filter statement at the [edit interface interface-name unit logical-unit-number family family-name] hierarchy level:

[edit interface interface-name unit logical-unit-number family inet]rpf-check fail-filter rpf-dhcp;

Published: 2010-04-15