Hello

Im trying to convert a IPv4 trace filterrole in a IPv6 
variant, but I miss an equivalent check of "ttl 1" at IPv6.

alf@lab# show firewall family inet filter accept-traceroute 
term accept-traceroute-udp {
    from {
        protocol udp;
        ttl 1;
        destination-port 33435-33450;
    }
    then {
        policer traceroute-1m;
        count accept-traceroute-udp;
        accept;
    }
}

There seems to be no test against the ttl or hop value.
Can somebody give me a hint ?

PS: Junos 10.4R8.5

Regards,
Alf

_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to