close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

loopback-firewall-optimization

date_range 07-Jun-24

Syntax

content_copy zoom_out_map
loopback-firewall-optimization;

Hierarchy Level

content_copy zoom_out_map
[edit chassis]

Description

Enable this setting to increase the system limit for the number of loopback filter terms that can be configured. When enabled, you can configure up to 768 loopback filter terms for IPv6, and up to 1152 terms for IPv4. The packet forwarding engine (PFE) will restart upon commit for the new system limits to take effect.

TTL (time-to-live) values such as 0/1 are not matched unless explicitly mentioned in the firewall filter term. Terms that include a reserved multicast destination such as 224.0.0.x/24 are not directly supported as match condition in filters used with the loopback address (lo0). Instead, to count packets destined to the reserved multicast address of 224.0. 0.6, you would need to create a filter that specifies protocol OSPF as the match term. An example showing such a configuration is provided below.

content_copy zoom_out_map
[edit interfaces]
lo0 {
    unit 0 {
        family <inet | inet6> {
            filter {
                input f1;
            }
             address 127.0.0.1/32;
        }
    }
}
[edit firewall]
    family <inet | inet6> {
    filter f1 {
        term t1 {
            from {
                protocol ospf;
            }
            then {
                count c1;
                accept;
            }
        }
    }
}

Required Privilege Level

interface

Release Information

Statement introduced in Junos OS Release 20.3R1.

arrow_backward PREVIOUS loopback (Fibre Channel Interface)

NEXT arrow_forward loopback-firewallv6-optimization

Junos CLI Reference

ON THIS PAGE

loopback-firewall-optimization

Syntax

Hierarchy Level

Description

Required Privilege Level

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

loopback-firewall-optimization

Syntax

Hierarchy Level

Description

Required Privilege Level

Release Information

Related Documentation

Stay in touch