This article explains how egress firewall filters affect packets generated from the Routing Engine on EX series switches.
Ingress firewall filters affect the flow of data packets that are received by the switch’s interfaces whether the packet is transiting a switch or send to the routing engine. However, egress firewall filters only affect data packets that are transiting a switch, but do not affect packets sent by the routing engine,
1. Ingress firewall filter applied to control locally destined packets that are received on the switch’s interfaces and are destined for the Routing Engine.
2. Ingress firewall filter applied to control incoming packets on the switch’s interfaces.
3. Egress firewall filter applied to control packets that are transiting the switch’s interfaces.