Re: Firewall filter to restrict traffic for one interface

Hi,

I meant either Option 1 or Option 2, i.e

Option 1:

firewall {
	family ethernet-switching {
		filter NAS-Filter-out {
			term NAS-Filter-Allow {
				from {
					source-address {
						192.168.1.66/32;
					}
				}
                                then {
                                        accept;
                                        count NAS-out;
                                }
			}
		}
	}
}
interfaces {
	ge-0/0/5 {
		unit 0 {
			family ethernet-switching {
				filter {
					output NAS-Filter-out;
				}
			}
		}
	}
}

Or Option 2:

firewall {
	family ethernet-switching {
		filter NAS-Filter-In {
			term NAS-Filter-Allow {
				from {
					destination-address {
						192.168.1.66/32;
					}
				}
                                then { 
                                        accept;
                                        count NAS-in;
                                }
			}
		}
	}
}
interfaces {
	ge-0/0/5 {
		unit 0 {
			family ethernet-switching {
				filter {
					input NAS-Filter-In;
				}
			}
		}
	}
}

Could you try either of those options.

Cheers,

Ashvin