I've applied the settings you recomended. I've also noticed my MX80 applies this filter ok, but the router in question MX104 is not applying this filter correctly. (see below).
Below is my static v6 routes. However they have been like this for a long time without previous issues.
routing-options {
rib inet6.0 {
static {
route 2602:XXXX::/36 discard;
route 2001:XXXX:XXXX::/40 discard;
route 2602:XXXX:XXXX:507::/64 next-hop 2602:XXXX:0:1507::;
route 2602:XXXX:XXXX::/48 next-hop 2602:XXXX:XXXX:7777::1;
route 2001:XXXX:XXXX::/48 discard;
set policy-options prefix-list BGPv6-NEIGHBORS apply-path "protocols bgp group <*> neighbor <*:*>" set interfaces lo0 unit 0 family inet6 filter input ProtectREv6
firewall {
family inet6 {
filter ProtectREv6 {
term ospfv3 {
from {
source-address {
fe80::/10;
}
next-header ospf;
}
then accept;
}
term bgpv6-connect {
from {
source-prefix-list {
BGPv6-NEIGHBORS;
}
next-header tcp;
destination-port bgp;
}
then accept;
}
term icmpv6 {
from {
payload-protocol icmp6;
}
then accept;
}
term default {
then {
count discardfilterv6;
discard;
}
}
}
}# show interfaces filters lo0
Interface Admin Link Proto Input Filter Output Filter
lo0 up up
lo0.0 up up inet ProtectRE
inet6
It's not applying the filter?
Filter ProtectREv6 is Trio specific; will not get installed on DPCs for interface lo0
