[j-nsp] JunOS forwarding IPv6 packets with link-local source

Daniel Verlouw daniel at shunoshu.net
Fri May 17 06:05:40 EDT 2024


Hi,

On Thu, May 16, 2024 at 8:22 PM Antti Ristimäki via juniper-nsp
<juniper-nsp at puck.nether.net> wrote:
> I thought this issue had been resolved already years ago, but I
> noticed that JunOS still happily forwards IPv6 packets with link-local
> source address towards remote destinations. This of course violates
> RFC4291. Also recent JunOS releases seem broken, tested with e.g. 21.4
> and 23.2.

on MX:
set forwarding-options family inet6 source-checking

refer to: https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/source-checking-edit-forwarding-options.html

--Daniel.


More information about the juniper-nsp mailing list