To filter packets with a specific destination IP address, use the set firewall filter sequence from destination-address-ipv4 command in L2/L3 configuration mode. To remove the filter sequence, use the delete form of the command.
set firewall filter filter-name sequence sequence-number from destination-address-ipv4 address/mask
delete firewall filter filter-name sequence sequence-number from destination-address-ipv4
|sequence-number||Filter sequence number. The range is 0-9999.|
|address/mask||IPv4 subnet and subnet mask. For example, 10.1.1.0/24.|
The following example configures sequence 1 of the MyFilter filter to drop packets to the destination IP address 192.168.1.1:
The following example prevents sequence 1 of the MyFilter filter from dropping packets based on destination IP packets: