Cheap Juniper Gear for Lab

Mark Kamichoff prox at
Tue Apr 10 20:02:07 CDT 2012

On Tue, Apr 10, 2012 at 11:57:31AM -0700, Owen DeLong wrote:
> > The fact that you can't put it into flow mode.
> s/flow/packet/
> (oops, wasn't awake yet)

Actually, this is possible:

prox at asgard> show configuration security         
forwarding-options {
    family {
        inet6 {
            mode packet-based;
        mpls {
            mode packet-based;

The above is from an SRX210B, but the same configuration will work on
any J-series or /branch/ SRX-series platform.

Don't let the "mpls" keyword throw you off.  This actually causes the
box to run the inet /and/ mpls address families in packet mode.

- Mark

Mark Kamichoff
prox at
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <>

More information about the NANOG mailing list