Description

Lo0 Firewall filter rules in case of logical system

Symptoms

 

 

Solution

Case 1: (main routing device has lo0.0 and filter A) (logical-system has lo0.n and filter B) (routing-instance does not have lo0)

  • The BGP traffic coming from Router B destined to routing-instance peer does not inherit filter B of logical-system, but inherits filter A of main routing device.

Case 2: (main routing device has lo0.0 and filter A) (logical-system has lo0.n and filter B) (routing-instance has lo0.n)

 

 

  • The BGP traffic coming from Router B destined to routing-instance peer does not inherit any filter.

Case3: (main routing device has lo0.0 and filter A) (logical-system has lo0.n) (routing-instance has lo0.n)

 

 

  • The BGP traffic coming from Router B destined to routing-instance peer does not inherit filter A.

Case 4: (main routing device has lo0.0 and filter A) (logical-system does not have lo0.n) (routing-instance has lo0.n)

 

 

  • The BGP traffic coming from Router B destined to routing-instance peer inherits filter A. The BGP traffic coming from Router B destined to logical-system peer inherits filter A.

Case 5: (main routing device has lo0.0 and filter A) (logical-system does not have lo0) (routing-instance does not have lo0 interface)

 

 

  • The BGP traffic coming from Router B destined to routing-instance peer inherits filter A. The BGP traffic coming from Router B destined to logical-system peer inherits filter A.

Case 6: (main routing device has lo0.0 and filter A) (logical-system has lo0.n and filter B)

 

 

  • The BGP traffic coming from Router B destined to logical-system peer inherits filter B.

Case 7: (main routing device has lo0.0 and filter A) (logical-system has lo0.n)

 

 

  • The BGP traffic coming from Router B destined to logical-system peer does not inherit filter A.

Case 8: (main routing device has lo0.0) (logical-system has lo0.n and filter B)

 



 

  • The BGP traffic coming from Router B destined to logical-system peer inherits filter B.

Case 9: (main routing device has lo0.0 ) (logical-system has lo0.n and filter B) ( routing-instance has lo0.n)

 

 

  • The BGP traffic coming from Router B destined to routing-instance peer does not inherit filter B.

Case 10: (main routing device has lo0.0 ) (logical-system has lo0.n and filter B) (routing-instance has lo0.n and filter C)

 

 

  • The BGP traffic coming from Router B destined to routing-instance peer inherits filter C.

Case 11: (main routing device has lo0.0 ) (logical-system has lo0.n and filter B) ( routing-instance does not have lo0)

 

 

  • The BGP traffic coming from Router B destined to routing-instance peer does not inherit filter B.

Case 12: (main routing device does not have lo0 ) (logical-system has lo0.n and filter B) ( routing-instance does not have lo0)

 

  • The BGP traffic coming from Router B destined to routing-instance peer does not inherit filter B. The BGP traffic coming from Router B destined to logical-system peer inherits filter B.

Case 13: (main routing device does not have lo0 ) (logical-system has lo0.n and filter B) ( routing-instance has lo0)

 

 

  • The BGP traffic coming from Router B destined to routing-instance peer does not inherit filter B. The BGP traffic coming from Router B destined to logical-system peer inherits filter B.

Case 14: (main routing device does not have lo0 ) (logical-system has lo0.n and filter B) (routing-instance has lo0 and filter C)

 

 

  • The BGP traffic coming from Router B destined to routing-instance peer inherits filter C.

Modification History

2024-07-27 : Article Created