[j-nsp] Request for help: Firewall config to match fragmented ipv6 packet

Vijesh Chandran vijesh at juniper.net
Sat Mar 14 23:23:55 EDT 2015


Hi Tim,
Thanks for reply.
Let me rephrase question.
In recursive next header in ipv6, we can have fragmented header which of code 44. I am trying to find out how to match this condition.

Regards,
Vijesh
Mob:669.777.8502

From: Tim Jackson <jackson.tim at gmail.com<mailto:jackson.tim at gmail.com>>
Date: Saturday, March 14, 2015 at 7:55 PM
To: Vijesh Chandran <vijesh at juniper.net<mailto:vijesh at juniper.net>>
Cc: jnsp <juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>>
Subject: Re: [j-nsp] Request for help: Firewall config to match fragmented ipv6 packet


... V6 fragments don't exist.

On Mar 14, 2015 7:36 PM, "Vijesh Chandran" <vijesh at juniper.net<mailto:vijesh at juniper.net>> wrote:
Hello,
  Is it possible to match a fragmented ipv6 traffic using juniper fw term?
Please help if someone knows this.


-Thanks,
 Vijesh

_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net<mailto:juniper-nsp at puck.nether.net>
https://puck.nether.net/mailman/listinfo/juniper-nsp


More information about the juniper-nsp mailing list