Re: Firewall filter should not drop...but drop !

Rushi,

Thanks for your help. I do not have any other filter on physical or vitual interface. The only filter I have is the filter applied to the loopback interface...

{master:0}
admin@EX4300> show configuration interfaces ge-1/0/31
description "TO_ROUTER";
unit 0 {
    family inet {
        address 10.1.60.154/30;
    }
}

The ge-1/0/31 interface is runing OSPF.

Please note also that I didn't exceeded the TCAM firewall entry...

Dropped traffic seems to be an SNMP traffic (UDP pour 161 and 162). This is what I can see from the last drop... I do have the same effect with HTTP traffic (TCP port 80). This is a production network and since the migration to this device last friday, user seems to not complain.... Is it cosmetic ???

--

Salah