table inet firewall { chain to_switchs { meta iif $admin_if accept drop } chain from_switchs { meta oif $admin_if accept drop } }