Routing

last person joined: 3 days ago 

Ask questions and share experiences about ACX Series, CTP Series, MX Series, PTX Series, SSR Series, JRR Series, and all things routing, including portfolios and protocols.

  • 1.  Firewall filter behavior??

    Posted 01-21-2016 03:08
      |   view attached

    I configured firewall PROTECT-RE and apply to interface loopback. Why I can't ftp to host 192.168.10.101 although I except prefix NET in term 1?

    Attachment(s)

    txt
    log.txt   747 B 1 version


  • 2.  RE: Firewall filter behavior??
    Best Answer

     
    Posted 01-21-2016 03:16

    except key word is used to "Match addresses not in this prefix list", but the next entry is "prefix-list UNTRUST" and UNTRUST includes 192.168.10.101.

     

    You may need to seperate terms.