[j-nsp] MX960 vs MX10K

Saku Ytti saku at ytti.fi
Thu Mar 5 01:25:21 EST 2020


On Thu, 5 Mar 2020 at 05:52, Chris Kawchuk <ckawchuk at gmail.com> wrote:

> Only question is if it needs stateful-ness or not (IPSEC, CGNAT etc...), but only the OP can answer that.

IPSEC isn't stateful in any meaningful way If you can implement MACSec
it shouldn't take much more transistors to do IPSEC.

Indeed current gen (post EA, i.e. ZT and YT) Trio does IPSEC in every port.

-- 
  ++ytti


More information about the juniper-nsp mailing list