[j-nsp] DCU matching in firewall on MX

Mark Tinka mtinka at globaltransit.net
Thu Oct 30 21:39:12 EDT 2008


On Friday 31 October 2008 08:44:23 Richard A Steenbergen 
wrote:

> I need to do a DCU match on ingress traffic only, and
> only on specific interfaces. If the DCU match worked in a
> normal firewall filter, I would just apply it as an
> ingress filter only to specific interfaces.

Yes, you can.

We had the exact same requirement and PoC'ed it on the 
MX480. It does work.

Cheers,

Mark.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: This is a digitally signed message part.
URL: <https://puck.nether.net/pipermail/juniper-nsp/attachments/20081031/4b4c2a53/attachment-0001.bin>


More information about the juniper-nsp mailing list