Hi Here's the general behaviour in Junos: (routing) https://kb.juniper.net/InfoCenter/index?page=content&id=KB23547
<https://kb.juniper.net/InfoCenter/index?page=content&id=KB23547>However, QFX5k is different: https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/bridging-vrf-qfx-series-cli.html Note: The QFX5100, QFX5110, and QFX5200 switches do not depend on the VRF match for loopback filters configured at different routing instances. Loopback filters per routing instance (such as lo0.100, lo0.103, lo0.105) are not supported and may cause unpredictable behavior. We recommend that you apply the loopback filter to the lo0.0 (master routing instance) only. Regards Roger On Thu, Sep 17, 2020 at 3:22 PM Cristian Cardoso < [email protected]> wrote: > Hi > I am trying to create a firewall filter to protect the routing engine > only in a routing-instance, and with that I apply the firewall filter > in the lo0.1 interface. > I noticed that when applying the filter that in theory should only > apply to the routing-instance, it also ends up dropping packets that > come to lo0.0, is Junos supposed to work that way? > > Best Regards > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
