С. К., [30.12.2021 19:25]
Hi! I want to deny icmp-timestamp request on IP address. So i were add following filter:
С. К., [30.12.2021 19:26]
set interfaces irb unit 4093 family inet filter input icmp-timestamp
set interfaces irb unit 4093 family inet filter output icmp-timestamp
set firewall family inet filter icmp-timestamp term 1 from protocol icmp
set firewall family inet filter icmp-timestamp term 1 from icmp-type timestamp-reply
set firewall family inet filter icmp-timestamp term 1 from icmp-type timestamp
set firewall family inet filter icmp-timestamp term 1 then discard
set firewall family inet filter icmp-timestamp term 2 then accept
С. К., [30.12.2021 19:27]
This filter works in EX4600 switch, but won't to work in QFX5100. Any ideas?