Re: Firewall filter to restrict traffic for one interface

Hi,

The filter with match condition source-address 192.168.1.66 should be applied as output filter for it to work. Please check Option 1.

You could try using match address 192.168.1.66/32 to avoid confusion:

Possible completions:> address              Match IP source or destination address

firewall {
	family ethernet-switching {
		filter NAS-Filter {
			term NAS-Filter-Allow {
				from {
					address {
						192.168.1.66/32;
					}
				}
                                then {
                                        accept;
                                }
			}
		}
	}
}
interfaces {
	ge-0/0/5 {
		unit 0 {
			family ethernet-switching {
				filter {
					input NAS-Filter;
				}
			}
		}
	}
}

Cheers,

Ashvin