JN0-102 · Question #311
Given the configuration shown in the exhibit, what is the function of the protect-loopback filter? [edit interfaces] user@router# show ... lo0 { unit 0 { family inet { filter { input protect-loopback;
The correct answer is A. To protect the Routing Engine. Applying an input filter to the loopback interface (lo0) is a standard security measure to protect the Routing Engine from unwanted or malicious traffic.
Question
Given the configuration shown in the exhibit, what is the function of the protect-loopback filter? [edit interfaces] user@router# show ... lo0 { unit 0 { family inet { filter { input protect-loopback; } address 192.168.100.1/32;
Options
- ATo protect the Routing Engine
- BTo protect all interfaces on the device
- CTo protect the Packet Forwarding Engine
- DTo protect the management interface
How the community answered
(29 responses)- A90% (26)
- C3% (1)
- D7% (2)
Why each option
Applying an input filter to the loopback interface (`lo0`) is a standard security measure to protect the Routing Engine from unwanted or malicious traffic.
The loopback interface (`lo0`) is the logical interface that represents the router's Routing Engine. Applying an input filter to `lo0.0` ensures that only authorized traffic can reach and be processed by the Routing Engine, protecting it from denial-of-service attacks or unauthorized access.
Filters applied to the loopback interface protect the Routing Engine, not all interfaces on the device; each interface typically requires its own specific filtering.
The Packet Forwarding Engine (PFE) is primarily responsible for forwarding transit traffic, while the loopback interface is associated with traffic destined for the router's control plane (Routing Engine).
While the management interface (e.g., fxp0) is also used for device management, the loopback interface provides another crucial access point for the Routing Engine and often carries management traffic as well; a filter on lo0 protects the RE itself, which includes management access via lo0.
Concept tested: Loopback interface security
Source: https://www.juniper.net/documentation/us/en/software/junos/security/topics/topic-map-firewall-filters-loopback-interface.html
Topics
Community Discussion
No community discussion yet for this question.