Colleagues,

I have customers' networks connected to routing-instances of type
"virtual-router." These routing-instances are supposed to be isolated
and use their own address space.

However, a customer can telnet/ssh from their network to the
virtual-router's IP address effectively telnetting to the main device. 

Is there an elegant way to prevent this from happening, i.e. to permit
telnet/ssh access from hosts in the inet.0 table but deny from hosts
from the CUSTOMERXX.inet.0 table?

Thanks in advance for any input.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:[email protected]
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to