firewall/config/networks/switchs.nft

table inet firewall {

	chain to_switchs {
		# meta iif $admin_if accept
		drop
	}

	chain from_switchs {
		# meta oif $admin_if accept
		drop
	}

}