Ensure the receive path or interface filter for all MSDP routers only accepts MSDP packets from known MSDP peers. set firewall family inet filter term 1 from source-prefix-list msdp-peers set firewall family inet filter term 1 from protocol tcp set firewall family inet filter term 1 from destination-port msdp set firewall family inet filter term 1 then accept set firewall family inet filter term 2 from source-prefix-list msdp-peers set firewall family inet filter term 2 from protocol tcp set firewall family inet filter term 2 from source-port msdp set firewall family inet filter term 2 then accept set firewall family inet filter term default then syslog set firewall family inet filter term default then discard set firewall family inet6 filter term 1 from source-prefix-list msdp-peers-ipv6 set firewall family inet6 filter term 1 from next-header tcp set firewall family inet6 filter term 1 from destination-port msdp set firewall family inet6 filter term 1 then accept set firewall family inet6 filter term 2 from source-prefix-list msdp-peers-ipv6 set firewall family inet6 filter term 2 from next-header tcp set firewall family inet6 filter term 2 from source-port msdp set firewall family inet6 filter term 2 then accept set firewall family inet6 filter term default then syslog set firewall family inet6 filter term default then discard set interfaces unit family inet filter input set interfaces unit family inet address / set interfaces unit family inet6 filter input set interfaces unit family inet6 address / set interfaces lo0 unit family inet filter input set interfaces lo0 unit family inet address /32 set interfaces lo0 unit family inet6 filter input set interfaces lo0 unit family inet6 address /128

Detections

Analytics

Item Search