Hi Netgear,
Good day
I tested the reported issue in QFX5K.
After I apply below commands, some warning log displayed.
It shows that if a firewall filter term includes log/syslog and accept, then a packet matching the firewall filter would not be routed across EX2300 and QFX5K switches.
--------------------------------------------------------------------------
{master:0}[edit]
root@QFX5100# ...EST-management-ipv4 term accept-icmp then log
{master:0}[edit]
root@QFX5100# commit
[edit firewall family inet filter filter-TEST-management-ipv4 term accept-icmp then]
'accept'
warning: a firewall filter term includes log/syslog and accept. A packet matching the firewall filter would not be routed across EX2300 and QFX5K switches.
[edit firewall family inet filter filter-TEST-management-ipv4 term accept-icmp then]
'accept'
warning: a firewall filter term includes log/syslog and accept. A packet matching the firewall filter would not be routed across EX2300 and QFX5K switches.
[edit firewall family inet filter filter-TEST-management-ipv4 term accept-icmp then]
'accept'
warning: a firewall filter term includes log/syslog and accept. A packet matching the firewall filter would not be routed across EX2300 and QFX5K switches.
configuration check succeeds
commit complete
--------------------------------------------------------------------------
There is a PR1405138 shows that the warning logs was added on below fixed version.
https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1405138
Fix info as per the PR:- junos:18.1R4 junos:18.2R3 junos:18.3R2 junos:18.4R2 junos:19.1R1 junos:19.2R1
Please advise if further assistance is required and I will be happy to assist you.
Please mark "Accepted Solution" if this helps.
Kudos are always appreciated
Thanks
Suraj