Commit error is thrown even though valid filter is bound to the IFF when rpf check is enabled.
set interfaces et-0/0/0 unit 0 family inet filter input filter-customer-in-inet
set interfaces et-0/0/0 unit 0 family inet filter output filter-customer-out-inet
set interfaces et-0/0/0 unit 0 family inet6 rpf-check
set interfaces et-0/0/0 unit 0 family inet6 filter input filter-customer-in-inet6
set interfaces et-0/0/0 unit 0 family inet6 filter output filter-customer-out-inet6
deactivate firewall family inet filter filter-customer-in-inet interface-specific
deactivate firewall family inet6 filter filter-customer-in-inet6 interface-specific
root@JTAC# commit
[edit interfaces et-0/0/0 unit 0 family inet6]
'filter'
Referenced filter 'filter-customer-in-inet6' of family 'inet6' can be used only as interface-specific in 'input'. Configure 'interface-specific' knob under firewall config
error: commit failed: (validation hook evaluation failed)
{master}[edit]
root@JTAC# deactivate interfaces et-0/0/0.0 family inet6 rpf-check
commit complete
This issue is addressed via internal PR 1896385.
The python validation script, instead of checking rpf fail-filters, checks for rpf enabled ones itself causing error.
Resolved-In
evo:24.4R2-S2-EVO evo:25.2R2-EVO evo:25.3R1-EVO evo:25.4R1-EVO