This requirement is not applicable for the DODIN Backbone. Configure the router to allow only incoming communications from authorized sources to be routed to authorized destinations. set policy-options prefix-list inside-addresses-ipv4 192.0.2.0/25 set policy-options prefix-list inside-addresses-ipv4 192.0.2.130/32 set policy-options prefix-list inside-addresses-ipv6 2001:db8:1::/64 set policy-options prefix-list inside-addresses-ipv6 2001:db8:a1::/64 set firewall family inet filter authorized-outbound-ipv4 set firewall family inet filter authorized-outbound-ipv4 term permitted-source-addresses from source-prefix-list inside-addresses-ipv4 set firewall family inet filter authorized-outbound-ipv4 term permitted-source-addresses then accept set firewall family inet filter authorized-outbound-ipv4 term default-deny then log set firewall family inet filter authorized-outbound-ipv4 term default-deny then syslog set firewall family inet filter authorized-outbound-ipv4 term default-deny then discard set firewall family inet filter authorized-inbound-ipv4 set firewall family inet filter authorized-inbound-ipv4 term permitted-destination-addresses from destination-prefix-list inside-addresses-ipv4 set firewall family inet filter authorized-inbound-ipv4 term permitted-destination-addresses then accept set firewall family inet filter authorized-inbound-ipv4 term default-deny then log set firewall family inet filter authorized-inbound-ipv4 term default-deny then syslog set firewall family inet filter authorized-inbound-ipv4 term default-deny then discard set firewall family inet6 filter authorized-outbound-ipv6 set firewall family inet6 filter authorized-outbound-ipv6 term permitted-source-addresses from source-prefix-list inside-addresses-ipv6 set firewall family inet6 filter authorized-outbound-ipv6 term permitted-source-addresses then accept set firewall family inet6 filter authorized-outbound-ipv6 term default-deny then log set firewall family inet6 filter authorized-outbound-ipv6 term default-deny then syslog set firewall family inet6 filter authorized-outbound-ipv6 term default-deny then discard set firewall family inet6 filter authorized-inbound-ipv6 set firewall family inet6 filter authorized-inbound-ipv6 term permitted-destination-addresses from destination-prefix-list inside-addresses-ipv6 set firewall family inet6 filter authorized-inbound-ipv6 term permitted-destination-addresses then accept set firewall family inet6 filter authorized-inbound-ipv6 term default-deny then log set firewall family inet6 filter authorized-inbound-ipv6 term default-deny then syslog set firewall family inet6 filter authorized-inbound-ipv6 term default-deny then discard set interfaces unit family inet filter input authorized-inbound-ipv4 set interfaces unit family inet6 filter input authorized-inbound-ipv6 set interfaces unit family inet filter input authorized-outbound-ipv4 set interfaces unit family inet6 filter input authorized-outbound-ipv6

Detections

Analytics

Item Search