Filtering PIM joins on an IRB interface?

How to correctly filter PIM joins in policy-options/policy-statement on an IRB interface.

In order to reject PIM for a local RP between group 249.255.0.0/16 and source 10.15.29.224/27, you can use a specific filter in policy-options/policy-statement called ‘pim-join-filter’ trying to reject this specific join:

term bad-groups {
    from {
        route-filter 249.255.1.1/32 exact;
    }
then reject;
}

term 1stTerm {
    from {
        protocol pim;
        route-filter 10.15.29.10/32 exact;
    }
then reject;
}

An IRB interface the PIM filter being used to block the source address will not work properly.

A firewall filter needs to be used to block the specific source address, instead of a policy. If the filter shown above is used on a regular interface (non-IRB) then it will work as expected.

Related