Re: restrict access to EX switch

Nevermind , now it working fine

I've configured it in another way:

set policy-options prefix-list manager-ip

set policy-options prefix-list SW-ADMIN x.x.x.x/32

set interfaces lo0 unit 0 family inet filter input SW_Protection

set firewall family inet filter SW_Protection term ALLOW-MNG from source-prefix-list SW-ADMIN

set firewall family inet filter SW_Protection term ALLOW-MNG then accept

set firewall family inet filter SW_Protection term BLOCK-MNG from destination-address x.x.x.x/32

set firewall family inet filter SW_Protection term BLOCK-MNG from destination-port ssh

set firewall family inet filter SW_Protection term BLOCK-MNG from destination-port telnet

set firewall family inet filter SW_Protection term BLOCK-MNG from destination-port http

set firewall family inet filter SW_Protection term BLOCK-MNG then discard

set firewall family inet filter SW_Protection term ALLOW-REST then accept

I don't know why from the first example it did not work .. but hey, now it is working by this way