[j-nsp] IPv6 RE protection

[Amarjeet Singh]

Hello - Security is all or none thing, if something left open risk is
always there.
You should apply IPv6 filters too.
Juniper MX series book has very nice example for it, have a peek to it.

Br, Amarjeet


>
> Message: 1
> Date: Sat, 25 Apr 2015 22:36:47 +0200
> From: Cydon Satyr <cydonsatyr at gmail.com>
> To: juniper-nsp at puck.nether.net
> Subject: [j-nsp] IPv6 RE protection
> Message-ID:
>         <
> CAF0PUwd4WTpXy1XEtH0Vc2vdH07g0xmvHuTmh0n1w7cRzRE4gw at mail.gmail.com>
> Content-Type: text/plain; charset=UTF-8
>
> Hello,
> Currently we don't use any IPv6 RE protect filters on our routers (6PE only
> in network). We do use IPv6 filters on public interfaces, however.
> Would you recommend deploying IPv6 RE filters on our edge routers at least.
>
> What kind of configuration you have in your network?
>
> Also, do you know if Juniper still only supports matching on one
> next-header?
>
> Best Regards community
>
>
>