JN0-102 · Question #347
You are configuring a firewall filter. Which "from" criterion would match only those packets destined for 10.10.10.1?
The correct answer is B. [edit firewall filter test]. To match packets specifically destined for the IP address 10.10.10.1 within a Juniper firewall filter, the from destination-address 10.10.10.1/32 criterion is used. This specifies that the filter term should apply only to packets where the destination IP matches the exact…
Question
You are configuring a firewall filter. Which "from" criterion would match only those packets destined for 10.10.10.1?
Options
- A[edit firewall filter test]
- B[edit firewall filter test]
- C[edit firewall filter test]
- D[edit firewall filter test]
How the community answered
(33 responses)- A3% (1)
- B82% (27)
- C9% (3)
- D6% (2)
Why each option
To match packets specifically destined for the IP address 10.10.10.1 within a Juniper firewall filter, the `from destination-address 10.10.10.1/32` criterion is used. This specifies that the filter term should apply only to packets where the destination IP matches the exact address.
(Assuming choice A contained "set firewall filter test term <term-name> from source-address 10.10.10.1/32;"). The `source-address` criterion matches the packet's origin, not its destination.
(Assuming choice B contained "set firewall filter test term <term-name> from destination-address 10.10.10.1/32;"). The `destination-address` match condition in a Junos firewall filter specifically targets the destination IP address of incoming or outgoing packets. Using `10.10.10.1/32` ensures an exact match for that specific host address.
(Assuming choice C contained an invalid criterion or incorrect syntax). There is no standard `address` criterion to match both source and destination simultaneously in this direct manner; specific match types like `source-address` or `destination-address` are used.
(Assuming choice D contained an incorrect criterion like `destination-port` or wrong syntax). A `destination-port` criterion matches a TCP/UDP port number, not an IP address.
Concept tested: Firewall filter destination address matching
Source: https://www.juniper.net/documentation/us/en/software/junos/routing-policy/topics/topic-map/firewall-filter-match-conditions-for-ipv4-traffic.html#id-match-conditions-for-ipv4-addresses
Topics
Community Discussion
No community discussion yet for this question.