If the management interface is a routed interface, it must be configured with both an ingress and egress ACL. set policy-options prefix-list OOBM-ipv4 192.0.2.0/24 set policy-options prefix-list OOBM-ipv6 2001:db8:2::/64 set firewall family inet filter inbound-OOBM-ipv4 term 1 from source-prefix-list OOBM-ipv4 set firewall family inet filter inbound-OOBM-ipv4 term 1 from protocol icmp set firewall family inet filter inbound-OOBM-ipv4 term 1 from protocol ospf set firewall family inet filter inbound-OOBM-ipv4 term 1 then accept set firewall family inet filter inbound-OOBM-ipv4 term 2 from source-prefix-list OOBM-ipv4 set firewall family inet filter inbound-OOBM-ipv4 term 2 from protocol tcp set firewall family inet filter inbound-OOBM-ipv4 term 2 from destination-port ssh set firewall family inet filter inbound-OOBM-ipv4 term 2 then accept set firewall family inet filter inbound-OOBM-ipv4 term default then log set firewall family inet filter inbound-OOBM-ipv4 term default then syslog set firewall family inet filter inbound-OOBM-ipv4 term default then discard set firewall family inet filter outbound-OOBM-ipv4 term 1 from destination-prefix-list OOBM-ipv4 set firewall family inet filter outbound-OOBM-ipv4 term 1 from protocol icmp set firewall family inet filter outbound-OOBM-ipv4 term 1 from protocol ospf set firewall family inet filter outbound-OOBM-ipv4 term 1 then accept set firewall family inet filter outbound-OOBM-ipv4 term 2 from destination-prefix-list OOBM-ipv4 set firewall family inet filter outbound-OOBM-ipv4 term 2 from protocol tcp set firewall family inet filter outbound-OOBM-ipv4 term 2 from source-port ssh set firewall family inet filter outbound-OOBM-ipv4 term 2 then accept set firewall family inet filter outbound-OOBM-ipv4 term default then log set firewall family inet filter outbound-OOBM-ipv4 term default then syslog set firewall family inet filter outbound-OOBM-ipv4 term default then discard set firewall family inet filter inbound-OOBM-ipv6 term 1 from source-prefix-list OOBM-ipv6 set firewall family inet filter inbound-OOBM-ipv6 term 1 from next-header icmp6 set firewall family inet filter inbound-OOBM-ipv6 term 1 from next-header ospf set firewall family inet filter inbound-OOBM-ipv6 term 1 then accept set firewall family inet filter inbound-OOBM-ipv6 term 2 from source-prefix-list OOBM-ipv6 set firewall family inet filter inbound-OOBM-ipv6 term 2 from next-header tcp set firewall family inet filter inbound-OOBM-ipv6 term 2 from destination-port ssh set firewall family inet filter inbound-OOBM-ipv6 term 2 then accept set firewall family inet filter inbound-OOBM-ipv6 term default then log set firewall family inet filter inbound-OOBM-ipv6 term default then syslog set firewall family inet filter inbound-OOBM-ipv6 term default then discard set firewall family inet6 filter outbound-OOBM-ipv6 term 1 from destination-prefix-list OOBM-ipv6 set firewall family inet6 filter outbound-OOBM-ipv6 term 1 from next-header icmp6 set firewall family inet6 filter outbound-OOBM-ipv6 term 1 from next-header ospf set firewall family inet6 filter outbound-OOBM-ipv6 term 1 then accept set firewall family inet6 filter outbound-OOBM-ipv6 term 2 from destination-prefix-list OOBM-ipv6 set firewall family inet6 filter outbound-OOBM-ipv6 term 2 from next-header tcp set firewall family inet6 filter outbound-OOBM-ipv6 term 2 from source-port ssh set firewall family inet6 filter outbound-OOBM-ipv6 term 2 then accept set firewall family inet6 filter outbound-OOBM-ipv6 term default then log set firewall family inet6 filter outbound-OOBM-ipv6 term default then syslog set firewall family inet6 filter outbound-OOBM-ipv6 term default then discard set interfaces unit family inet filter input inbound-OOBM-ipv4 set interfaces unit family inet filter output outbound-OOBM-ipv4 set interfaces unit family inet / set interfaces unit family inet6 filter input inbound-OOBM-ipv6 set interfaces unit family inet6 filter output outbound-OOBM-ipv6 set interfaces unit family inet6 /

Detections

Analytics

Item Search