Unable to apply an IPv6 output filter on and IRB interface, getting commit error.

When trying to add source-address on egress port, commit error is seeing:

============

IRB configuration:

root@ex4650# show irb.2179

family inet {

filter {

output fanalyzer-onlyv4; ← IPv4 egress filter works

}

address xxxxxxx/29;

}

family inet6 {

filter {

output analyzer-onlyv6; ← IPv6 egress filter doesn't work (see below)

}

address xxxxxxxxxxx/64;

}

============

Filter configuration:

root@ex4650# show firewall family inet6 filter analyzer-onlyv6

term allow {

from {

source-address {

xxxxxxxxxxx/32;

}

}

then accept;

}

term deny {

from {

source-address {

::0/0;

}

}

then discard;

}

============

Error that appears when committing:

root@ex4650# commit check

[edit interfaces irb unit 2179 family inet6]

'filter'

Referenced filter 'analyzer-onlyv6' can not be used as source-address not supported on egress

error: Failed to read config

commit-check failed

commit-check failed

error: configuration check-out failed

============

For Juniper Networks EX4400, EX4600, EX4650, QFX5100, QFX5110, QFX5120, QFX5200, QFX5210, QFX5700 series

The option for "source-address" is not supported on egress mode, only on ingress and VLANs.

https://www.juniper.net/documentation/us/en/software/junos/routing-policy/topics/topic-map/firewall-filter-match-condtions-and-actions-qfx.html:

8/7/2023