[j-nsp] srx advice

Stefan Fouant sfouant at shortestpathfirst.net
Fri Jul 22 12:13:20 EDT 2011


On 7/22/2011 1:51 AM, Kurt Bales wrote:
> Hello Richard,
>
> I would hazard a guess that because not every virtual router needs to be
> running in flow-based mode (ie run some in packet-mode ala
> http://datainter.cz/doc/3500192-en.pdf ), that it may be possible to not
> require 2x Zones per VR.

In a similar vein, it's not uncommon to see Filter-Based Forwarding 
(FBF) scenarios for those that require next-hop resolution in a 
different table than inet.0.  In these cases you'll use a forwarding 
instance-type, but it won't be bound to any zones or require any 
security parameters.

Stefan Fouant
JNCIE-ER #70, JNCIE-M #513, JNCI
Technical Trainer, Juniper Networks
http://www.shortestpathfirst.net
http://www.twitter.com/sfouant


More information about the juniper-nsp mailing list