Re: EX 2200 firewall filter blocks everything

Hello,

Since this is "family ethernet-switching" filter, it inspects ARP as well but You haven't got a permit term for ARP.

Hence all Your ARP requests even for permitted hosts hit an implicit deny term.

Your filter should look like:

firewall {
         family ethernet-switching {
                  filter Allow {
                           term term1 {
                           from {
                                    source-address {
                                    192.168.1.5/32;
                                    }
                                    destination-address {
                                    192.168.1.10/32;
                                    }
                           }
                           then accept;
                           }
                           term term2 {
                           from {
                                    source-address {
                                    192.168.1.10/32;
                                    }
                                    destination-address {
                                    192.168.1.5/32;
                                    }
                           }
                           then accept;
                           }
                           term term3 {
                           from {
                                    ether-type arp;
                            }
                           then accept;
                           }
                  }
         }
}

HTH

Thx

Alex