One thing to think about, in IPv6:
On MX, one can use "match protocol" (with Trio / MPC cards).
But it's not supported on lo0 filters, where you were / probably still are 
restricted to "match next-header", in order to have a filter working as 

> Le 11 juil. 2018 à 20:17, Drew Weaver <> a écrit :
> Is there a list of best practices or 'things to think about' when 
> constructing a firewall filter for a loopback on an MX series router running 
> version 15 of Junos?

juniper-nsp mailing list

Reply via email to