[j-nsp] group re0 routing-options
Patrik Olsson
df at webkom.se
Mon Feb 16 08:37:54 EST 2009
> It uses the same path as the control traffic, i.e. OSPF, BGP, IS-IS
> packets, FPC health monitoring etc.
Fantastic.
> Incidentally, I highly recommend placing a spoof-protect filter on your
> fxp0 interface (something like: from source-address fxp0-network;
> dest-addr fxp0-network; then accept; rest then reject), because all
> packets entering fxp0 (e.g., broadcasts) with a non-fxp0-network
> destination will be sent to the PFE and be forwarded there.
So probably its is better to set up a virtual router instance and move
the fxp0 interface into it and use that for management and get the
rib/fib separated from the global instance?
Cheers
Patrik
More information about the juniper-nsp
mailing list