Quantcast
Channel: All Routing posts
Viewing all articles
Browse latest Browse all 8688

Re: address-book

$
0
0

You could reference more than one prefix list to accomplish the same thing:

 

set firewall family inet filter TERM1 term IN-Allow-SYSLOG from destination-address 148.64.56.88/32
set firewall family inet filter TERM1 term IN-Allow-SYSLOG from source-prefix-list SYSLOG-NYC

set firewall family inet filter TERM1 term IN-Allow-SYSLOG from source-prefix-list SYSLOG-LAX
set firewall family inet filter TERM1 term IN-Allow-SYSLOG from protocol udp
set firewall family inet filter TERM1 term IN-Allow-SYSLOG from destination-port 514
set firewall family inet filter TERM1 term IN-Allow-SYSLOG then accept

 

firewall {
    family inet {
        filter TERM1 {
            term IN-Allow-SYSLOG {
                from {
                    destination-address {
                        148.64.56.88/32;
                    }
                    source-prefix-list {
                        SYSLOG-NYC;
                        SYSLOG-LAX;
                    }
                    protocol udp;
                    destination-port 514;
                }
                then accept;
            }
        }
    }
}

Viewing all articles
Browse latest Browse all 8688

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>