Cheap Juniper Gear for Lab

Wed Apr 11 01:02:07 UTC 2012

On Tue, Apr 10, 2012 at 11:57:31AM -0700, Owen DeLong wrote:
> > The fact that you can't put it into flow mode.
> s/flow/packet/
> (oops, wasn't awake yet)

Actually, this is possible:

prox at asgard> show configuration security         
forwarding-options {
    family {
        inet6 {
            mode packet-based;
        }
        mpls {
            mode packet-based;
        }
    }
}

The above is from an SRX210B, but the same configuration will work on
any J-series or /branch/ SRX-series platform.

Don't let the "mpls" keyword throw you off.  This actually causes the
box to run the inet /and/ mpls address families in packet mode.

- Mark

-- 
Mark Kamichoff
prox at prolixium.com
http://www.prolixium.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20120410/80e26c42/attachment.sig>