[j-nsp] instance-specific filters for VPLS BUM/flood filtering

Saku Ytti saku at ytti.fi
Tue Nov 6 08:13:07 EST 2012


On (2012-11-06 00:35 -0900), Christopher E. Brown wrote:

> And I have tested and seen exactly the opposite with 10.4R10 in both
> MX80 and all trio MX960.

So chances are, in 10.4 instances policers are shared and 11.4 not shared.
This is kind wacky if behaviour has been changed like that. As people might
have dimensioned their IP option policers to near maximum in 10.4 and if
11.4 it's for each instance, you might expose yourself to new attack
vector.

I wonder what is intended/documented behaviour.

-- 
  ++ytti


More information about the juniper-nsp mailing list