Re: Filter allow traffic or routes into router?

"

set firewall family inet filter Vendor4 term Evc from destination-address 6.17.18.247/32
set firewall family inet filter Vendor4 term Evc from destination-address 6.17.18.247/32
set firewall family inet filter Vendor4 term Evc from protocol esp
set firewall family inet filter Vendor4 term Evc then count Evc
set firewall family inet filter Vendor4 term Evc then accept

set interfaces ge-1/1/5 unit 4 family inet filter input Evc"

"

The mentioned config allow/filters only data plane/traffic as the config is applied to a physical interface(ge)

To Filter routers/control plane , please apply the config on looback interface(RE based filter):

Sample config for the same:

set firewall family inet filter OSPF_FILTER term OSPF_NEIGHBOR from source-address 172.16.1.2/32

set firewall family inet filter OSPF_FILTER term OSPF_NEIGHBOR from protocol ospf

set firewall family inet filter OSPF_FILTER term OSPF_NEIGHBOR then log

set firewall family inet filter OSPF_FILTER term OSPF_NEIGHBOR then accept

set firewall family inet filter OSPF_FILTER term DENY_ANY then count DENIED_TRAFFIC

set firewall family inet filter OSPF_FILTER term DENY_ANY then discard

set interfaces lo0 unit 0 family inet filter input OSPF_FILTER

Please mark this as accepted solution, if it solves your issue