[j-nsp] IPv6 RE protection

[Michael Loftis]

On Saturday, April 25, 2015, Cydon Satyr <cydonsatyr at gmail.com> wrote:

> Hello,
> Currently we don't use any IPv6 RE protect filters on our routers (6PE only
> in network). We do use IPv6 filters on public interfaces, however.
> Would you recommend deploying IPv6 RE filters on our edge routers at least.
>
> What kind of configuration you have in your network?
>
> Also, do you know if Juniper still only supports matching on one
> next-header?


Depends on your hardware. MPC can dig a bit more precisely but DPC is
limited (hardware)

http://www.juniper.net/documentation/en_US/junos14.2/topics/reference/general/firewall-filter-match-conditions-for-ipv6-traffic.html




>
> Best Regards community
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net <javascript:;>
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>


-- 

"Genius might be described as a supreme capacity for getting its possessors
into trouble of all kinds."
-- Samuel Butler