JN0-351: Enterprise Routing and Switching, Specialist (JNCIS-ENT)Demo

By Juniper · Question Mode

QuestionQ25

Layer 2 Security

You need to create a new firewall filter to evaluate Layer 3 traffic sent between VLANs.

Which two statements are correct?

Choose two
  • A You should create a family Ethernet-switching firewall filter with the appropriate match criteria and actions.
  • B You should apply the firewall filter to the appropriate VLAN.
  • C You should create a family inet firewall filter with the appropriate match criteria and actions.
  • D You should apply the firewall filter to the appropriate IRB interface.
Explanation

Layer 3 routed IPv4 traffic uses a family inet firewall filter. Traffic between VLANs is routed through the IRB interface, so the filter is applied to the appropriate IRB interface. family ethernet-switching filters Layer 2 traffic on ports or VLANs, rather than inter-VLAN routed traffic.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!