Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: IP-Blacklist apply to all interface

$
0
0

Neat trick python!! You could hide the prefix-list and groups or the matians using pythons trick!!!

set groups TKI interfaces <ge-*> unit <*> family inet filter input TK1
set apply-groups TKI

set policy-options prefix-list TK1 15.10.1.0/26
set policy-options prefix-list TK1 16.10.1.0/26
set policy-options prefix-list TK1 168.10.1.0/26

set firewall family inet filter TK1 term 1 from prefix-list TK1
set firewall family inet filter TK1 term 1 then discard
set firewall family inet filter TK1 term 2 then accept

user@srxD300# show interfaces | display inheritance
ge-0/0/0 {
description "MGMT Interface - DO NOT DELETE";
unit 0 {
family inet {
##
## 'filter' was inherited from group 'TKI'
##
filter {
##
## 'input' was inherited from group 'TKI'
## 'TK1' was inherited from group 'TKI'
##
input TK1;
}
address 192.168.1.138/24;
}
}

=================================================

 

set routing-options martians 15.10.1.0/26 exact
set routing-options martians 16.10.1.0/26 exact
set routing-options martians 168.10.1.0/26 exact


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>