Description

After configuring switch policies (ACL/fiewall filters), clients are no longer able to communicate between them in same vlan.

Symptoms

After adding the Switch policy, we noted there was no ARP communication.

Solution

Please note that "Switch policy" option in MIST UI is intended only for GBP (group base policies) under campus fabric scenarios. This option is yet not available for regular vlan firewall filter.


Anyway, issue can be resolved by adding the line to explicitely allow ARP traffic. ie:


set groups top firewall family ethernet-switching filter from_Doors term 16 from ether-type arp

set groups top firewall family ethernet-switching filter from_Doors term 16 then accept

Modification History

2025-03-12 : Article Created