Discussion

from {
source-address {
10.0.8.0/24;
10.0.13.0/24;
}
protocol ospf;
}
then accept;
}
term tcp-traffic {
from {
source-address 10.0.0.0/8;
protocol tcp;
}
then accept:
}
term dns-servers {
from {
source-address {
10.0.0.0/8;
}
protocol udp;
port domain;
}
then accept;
}
term radius {
from {
source-address {
10.1.0.1/32;
10.3.0.1/32;
}
destination-port radius;
}
then accept;
}
term ssh-telnet {
from {
source-address {
10.0.8.0/24;
10.0.13.0/24;
}
destination-port [ ssh telnet ];
}
then accept;
}
term xnm-from-nms {
from {
source-address {
10.0.0.1/32;
10.0.5.1/32;
}
protocol tcp;
}
Protecting the Local Routing Engine | 325
This is the Title of the Book, eMatter Edition
Copyright © 2008 O’Reilly & Associates, Inc. All rights reserved.