This KB addresses the issue where the GBP filter is not working (accepting/discarding the packets) as expected.

GBP micro-segment filter is configured to discard the packets based on gbp-tag.

Issue Reported :

The packets are still being forwarded despite configuring the GBP micro-segmentation filter to discard them.

Sample GBP Filter configuration :

set firewall family any filter GBP-TAG micro-segmentation

set firewall family any filter GBP-TAG term VLAN10 from vlan-id 10

set firewall family any filter GBP-TAG term VLAN10 then gbp-tag 10

set firewall family any filter GBP-TAG term VLAN20 from vlan-id 20

set firewall family any filter GBP-TAG term VLAN20 then gbp-tag 20

set firewall family any filter GBP-TAG term VLAN30 from vlan-id 30

set firewall family any filter GBP-TAG term VLAN30 then gbp-tag 30

set firewall family any filter MSEG term From20-To10 from gbp-src-tag 20

set firewall family any filter MSEG term From20-To10 from gbp-dst-tag 10

set firewall family any filter MSEG term From20-To10 then count 20-To10

set firewall family any filter MSEG term From20-To10 then accept

set firewall family any filter MSEG term From20-To20 from gbp-src-tag 20

set firewall family any filter MSEG term From20-To20 from gbp-dst-tag 20

set firewall family any filter MSEG term From20-To20 then count 20-To20

set firewall family any filter MSEG term From20-To20 then discard

set firewall family any filter MSEG term From20-To30 from gbp-src-tag 20

set firewall family any filter MSEG term From20-To30 from gbp-dst-tag 30

set firewall family any filter MSEG term From20-To30 then count 20-To30

set firewall family any filter MSEG term From20-To30 then discard

Workaround :

Deleting and reapplying the GBP filter configuration resolves the issue, but it reoccurs after a reboot.

Permanent Fix for the issue :

An internal PR has been raised. The issue is fixed in below versions :

23.2R2-S3, 22.4R3-S5, 24.2R2, 24.3R2, 23.4R2-S2, 24.3R1.

2024-08-27 : Article Created

2026-09-30 : Externalized