Hi guys,

i have a running IPv4 firewall filter for limiting tcp-traceroute. All works as desired:

term accept-traceroute-tcp {
    from {
        destination-prefix-list {
            router-v4-addr;
        }
        protocol tcp;
        ttl 1;
    }
    then {
        policer management-1m;
        count accept-traceroute-tcp;
        accept;
    }
}

Now i want to build the same filter for IPv6, but the statement "ttl" is not suported within family inet6
Does anybody knows the equivalent for IPv6.

Thanks in advance...
Regards,
Alex
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to