Firewall filters: IPv4 and IPv6: Layer 3 gateways in EVPN-VXLAN fabrics

Switches acting as Layer 3 gateways in EVPNVXLAN fabrics support IPv4 and IPv6 firewall filters in the ingress direction of the IRB interface. We recommend that you do not apply filters on the RIOT loopback interface. The switch supports the following match conditions: 

• source-address 
• destination-address 
• source-port 
• destination-port 
• ttl 
• ip-protocol 
• hop-limit 

The supported actions are: 

• accept 
• discard 
• log 
• syslog 
• policer 

It does not support filter-based forwarding (FBF).