Junos OS

Hi,

i have applied this filter in lo0:

set firewall filter protect-routing-engines term ftp-filter from source-address 172.30.32.133/32

set firewall filter protect-routing-engines term ftp-filter from source-address 172.30.32.142/32

set firewall filter protect-routing-engines term ftp-filter from destination-port ftp

et firewall filter protect-routing-engines term ftp-filter then accept

set interfaces lo0 unit 0 family inet filter input protect-routing-engine

Im trying to put this command "delete interfaces lo0 unit 0 family inet filter input protect-routing-engine" but it appears this error when i do the commit:

[edit firewall]
'filter protect-routing-engine'
Filter 'protect-routing-engine' previously defined under family 'inet'
error: configuration check-out failed

[edit]

I have tried to create another filter and apply to lo0 in direction but it stills showing the same error.

any help??

Hello , 

Can you share the output of :

#show interface lo0

# show firewall filter protect-routing-engines

Try deleing the interface configuration of lo0 and re creating the interface without filters .

#delete interface lo0

Then recreate the interface .

show firewall filter protect-routing-engine

Filter: protect-routing-engine

run show interfaces lo0
Physical interface: lo0, Enabled, Physical link is Up
Interface index: 6, SNMP ifIndex: 6
Type: Loopback, MTU: Unlimited
Device flags : Present Running Loopback
Interface flags: SNMP-Traps
Link flags : None
Last flapped : Never
Input packets : 19669
Output packets: 19669

Logical interface lo0.0 (Index 83) (SNMP ifIndex 16)
Flags: SNMP-Traps Encapsulation: Unspecified
Input packets : 243
Output packets: 243
Protocol inet, MTU: Unlimited
Flags: Sendbcast-pkt-to-re

Logical interface lo0.16384 (Index 64) (SNMP ifIndex 21)
Flags: SNMP-Traps Encapsulation: Unspecified
Input packets : 0
Output packets: 0
Protocol inet, MTU: Unlimited
Addresses
Local: 127.0.0.1

Logical interface lo0.16385 (Index 65) (SNMP ifIndex 22)
Flags: SNMP-Traps Encapsulation: Unspecified
Input packets : 19426
Output packets: 19426
Protocol inet, MTU: Unlimited

Hello, 

Also try this :

#delete interface lo0.0 family inet filter

# commit

i cant delete the lo0

JM10-MEL# delete interfaces ?
Possible completions:
<[Enter]> Execute this command
<interface-name> Interface name
+ apply-groups Groups from which to inherit configuration data
+ apply-groups-except Don't inherit configuration data from these groups
fe-0/1/0 Conexion SW1 
fe-0/1/2 Oficina Malaga
fxp0 Interface name
ge-0/0/0 Interface name
ge-0/0/1 Conexion SW2 
ge-0/0/3 BGP_LINK_ALLOT
ge-1/0/0 SW1 Gi0/50
ge-1/0/1 Video
ge-1/0/3 STATIC_LINK_ALLOT
> interface-range Interface ranges configuration
> interface-set Logical interface set configuration
so-0/3/0 STM4-Madrid_
so-1/3/0 STM4-Madrid_
> traceoptions Interface trace options

Hello ,

Try deleting only the filter :

#delete interface lo0.0 family inet filter

then try to commit

i have tried delete all lo0 and error is the same. 

c@JM10-MEL# delete interfaces lo0.0 family inet filter

[edit]
c@JM10-MEL# commit confirmed 2
[edit firewall]
'filter protect-routing-engine'
Filter 'protect-routing-engine' previously defined under family 'inet'
error: configuration check-out failed

-----------------------------------------------------------

c@JM10-MEL# delete interfaces lo0.0

[edit]
c@JM10-MEL# commit confirmed 2
[edit firewall]
'filter protect-routing-engine'
Filter 'protect-routing-engine' previously defined under family 'inet'
error: configuration check-out failed

Hello , 

Delete the entire firewall filter named "protect-routing-engine"  .

#Delete firewall filter protect-routing-engine

then delete the filter part in interfaces .

#delete interfaces lo0.0 family inet filter .

Then recreate the same filter with different name . and try to add them .

i was deleting the filter with this commad "delete interfaces lo0 unit 0 family inet filter input protect-routing-engine". 

i tried this and it worked:

cableadmin@JM10-MEL# delete firewall filter protect-routing-engine