[j-nsp] SRX for MPLS

[Barny Sanchez]

High-end SRXs (SRX3000s and SRX5000s) do not support packet-based only processing.  

Branch SRX (SRX100s, SRX200s, SRX650s) support either packet-based only, flow-based only or mixed mode (selective packet services).  Please refer to the following app note for some great examples:  https://www.juniper.net/us/en/local/pdf/app-notes/3500192-en.pdf
 

Thanks,

Barny Sanchez
Sr. Consulting Engineer, Security Products & Solutions
Juniper Networks



On Oct 21, 2010, at 9:13 PM, Tim Eberhard wrote:

I don't believe that's the case. You can do MPLS (I can't say I've ever done
it, but I know the config is possible) the major catch with that is the SRX
will be switched to packet mode (vs flow) and you loose the flow
capabilities of the SRX platform. Basically you can turn the SRX into a
branch router and do MPLS but the MPLS router+firewall isn't possible.

security {
   forwarding-options {
       family {
           mpls {
               mode packet-based;
               }
           }
       }
}

Hope this clears things up,
-Tim Eberhard

On Thu, Oct 21, 2010 at 9:59 PM, Jai Chandra Gundapaneni <
jaichandra at juniper.net> wrote:

> At least not yet I should say.
> 
> Thanks & Regards,
> Jai
> 
> ----- Original Message -----
> From: Jai Chandra Gundapaneni
> To: 'giulianocm at uol.com.br' <giulianocm at uol.com.br>; '
> juniper-nsp at puck.nether.net' <juniper-nsp at puck.nether.net>
> Sent: Thu Oct 21 19:57:52 2010
> Subject: Re: [j-nsp] SRX for MPLS
> 
> Hi Giuliano,
> 
> We do not support MPLS on SRX platforms.
> 
> 
> 
> Thanks & Regards,
> Jai
> 
> ----- Original Message -----
> From: juniper-nsp-bounces at puck.nether.net <
> juniper-nsp-bounces at puck.nether.net>
> To: juniper-nsp at puck.nether.net <juniper-nsp at puck.nether.net>
> Sent: Thu Oct 21 19:48:46 2010
> Subject: [j-nsp] SRX for MPLS
> 
> People,
> 
> Does anyone uses SRX routers for MPLS (VPLS) Transport ?
> 
> We are thinking about the use of SRX220 under some conditions:
> 
> - Use it in a not a good environment without air conditioning and a lot
> of dust ... external box temperature rises from 35 to 42 Celsius.
> - Be the point to interconnect POPs using point to point radios
> (100~1000 Mbps)
> - Using it to provide a VPLS infrastructure for L2 transport and client
> isolation until the start of the backbone (M7i and MX80 Routers)
> - SRX220 to provide OSPFv2 and OSPFv3 L3 gateway for some routed clients.
> 
> The figure showed at the following link tries to resume it at all:
> 
> http://www.wztech.com.br/JUNIPER/Topology.png
> 
> It is possible to use this box in a such project ?  Do you have any
> experience using it to do this type of topology ?
> 
> Is is possible that SRX220 can work fine under so strength environment
> conditions ?  Could it blow up or goes down ?
> 
> If someone has implemented this kind of environment can please share the
> experiences ?
> 
> Thanks a lot,
> 
> Giuliano
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
> 
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp