Description

Sample firewall filter config to flap MicroBFD/interface

Symptoms

Sample firewall filter config to flap MicroBFD/interface

Solution

To trigger interface flap via BFD flap, then can use a filter to block BFD packet as below sample config:

The micro-BFD sessions use the well-known destination UDP port 6784 over LAG links:


 e.g.

set firewall family inet filter BlockMicroBFD term 1 from protocol udp

set firewall family inet filter BlockMicroBFD term 1 from port 6784

set firewall family inet filter BlockMicroBFD term 1 then reject

set firewall family inet filter BlockMicroBFD term 2 then accept


[edit interfaces ae23 unit 0 family inet]

-   filter {

-     input BlockMicroBFD;

-   }

Modification History

2025-02-18 : Article Created