[j-nsp] How many bits/bytes of a packet can be matched in a firewall rule on Juniper MX-series?

embolist embolist at pm.me
Fri Jul 9 06:23:51 EDT 2021


Sent from ProtonMail for iOS

On Fri, Jul 9, 2021 at 12:30, Saku Ytti <saku at ytti.fi> wrote:

> But seeing you included a question about filter chaining, I'm not sure
> I understood your question right.

I'm the one who's not understanding right, haha!

So, I can match a bit pattern within the first 256 bytes from the start of the IP header, is that correct?

How many bits can I match within that first 256 bytes?

Thanks for your help!


More information about the juniper-nsp mailing list