Description

Working firewall filter configuration is not working as needed on new EX4400

Symptoms

Error seeing on the EX4400 for a working firewall filter:

 

root@EX4400> show configuration firewall family ethernet-switching filter MULTICAST-CHECK

interface-specific;

term 1 {

from {

##

## Warning: value vlan ignored: unsupported platform (ex4400-48t)

##

vlan vlan-name;

##

## Warning: configuration block ignored: unsupported platform (ex4400-48t)

##

destination-address {

x.x.x.x/x;

}

}

then {

accept;

count multicast_beacon;

policer BADMULTICAST;

}

}

term 2 {

from {

##

## Warning: value vlan ignored: unsupported platform (ex4400-48t)

##

vlan vlan-name;

##

## Warning: configuration block ignored: unsupported platform (ex4400-48t)

##

destination-address {

x.x.x.x/x;

}

}

then {

accept;

count multicast_vrrp;

policer BADMULTICAST;

}

}

term 3 {

then accept;

}

Solution

The right syntax for the EX4400 for the errors seeing, will be the following :

 

set firewall family ethernet-switching filter MULTICASTCHECK term 1 from ip-destination-address 224.0.0.0/8

set firewall family ethernet-switching filter MULTICASTCHECK term 1 from user-vlan-id 400

set firewall family ethernet-switching filter MULTICASTCHECK term 2 from ip-destination-address 224.0.0.0/8

set firewall family ethernet-switching filter MULTICASTCHECK term 2 from user-vlan-id 305

Modification History

2023-10-02