New answers tagged ssh
1
You have a couple of options::
Option 1
The filter can stay on the loopback interface, you can simply add firewall terms and specify from interface. So if xe-0/0/0.0 was one of the interfaces connected to a CPE in a routing-instance and 1.1.1.1 was the router's in-band management address, you could do something like this:
jhead@MX1# show firewall
family ...
1
Typically, you either restrict SSH access to only the out-of-band managementport (fxp0). If that's not possible, you can set a filter on your loopback interface to restrict SSH access to only IP addresses you want to allow. Juniper has some nice configuration examples in this TechLibrary document. Basically, it should look something like this (taken from ...
Top 50 recent answers are included
