[j-nsp] group re0 routing-options

Patrik Olsson df at webkom.se
Mon Feb 16 08:37:54 EST 2009


> It uses the same path as the control traffic, i.e. OSPF, BGP, IS-IS
> packets, FPC health monitoring etc.

Fantastic.

> Incidentally, I highly recommend placing a spoof-protect filter on your
> fxp0 interface (something like: from source-address fxp0-network;
> dest-addr fxp0-network; then accept; rest then reject), because all
> packets entering fxp0 (e.g., broadcasts) with a non-fxp0-network
> destination will be sent to the PFE and be forwarded there.

So probably its is better to set up a virtual router instance and move
the fxp0 interface into it and use that for management and get the
rib/fib separated from the global instance?

Cheers
Patrik


More information about the juniper-nsp mailing list