I have an EX2200 running 12.3R12 to which i'm trying to apply some filters at layer 3. vlan 100 is bound to L3 interface unit 100 with ip 192.168.1.254/24. I want to prevent any 192.168.1.X clients from reaching 10.0.0.0/8, but permit them to reach any other IP (ie; internet). The switch has a routed interface uplink ge-0/0/0 unit 0 with ip 10.1.1.254/24
What might the filter set look like?