juniper interface-group

how to configure an interface-group

  family inet {
         filter if-group {
             term group1 {
                 from {
                     interface-group 1;
                     address {
                         192.168.80.114/32;
                     }
                     protocol tcp;
                     port finger;
                 }
                 then {
                     count if-group-counter1;
                     log;
                     reject;
                 }
             }
             term group-2 {
                 then {
                     count if-group-counter2;
                     log;
                     accept;
                 }
             }
         }
     }
   Assign one or more interfaces to the interface group referenced in the
   filter:
     [edit interfaces]
     fxp0 {
         unit 0 {
             family inet {
                 filter {
                     group 1;
                 }
                 address 192.168.5.38/24;
             }
         }
     }
   Apply the filter that contains an interface group:
     [edit interfaces]
     lo0 {
         unit 0 {
             family inet {
                 filter {
                     input if-group;
                     group 1;
                 }
                 address 10.0.0.1/32;
                 address 192.168.77.1/32;
             }
         }
     }
This entry was posted in Juniper. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s