[j-nsp] instance-specific filters for VPLS BUM/flood filtering
Saku Ytti
saku at ytti.fi
Tue Nov 6 08:13:07 EST 2012
On (2012-11-06 00:35 -0900), Christopher E. Brown wrote:
> And I have tested and seen exactly the opposite with 10.4R10 in both
> MX80 and all trio MX960.
So chances are, in 10.4 instances policers are shared and 11.4 not shared.
This is kind wacky if behaviour has been changed like that. As people might
have dimensioned their IP option policers to near maximum in 10.4 and if
11.4 it's for each instance, you might expose yourself to new attack
vector.
I wonder what is intended/documented behaviour.
--
++ytti
More information about the juniper-nsp
mailing list