[100590] in North American Network Operators' Group
Re: IPv6 firewall support
daemon@ATHENA.MIT.EDU (Pekka Savola)
Sat Oct 27 08:42:45 2007
Date: Sat, 27 Oct 2007 15:41:39 +0300 (EEST)
From: Pekka Savola <pekkas@netcore.fi>
To: nanog@nanog.org
In-Reply-To: <D03E4899F2FB3D4C8464E8C76B3B68B00145E5B3@E03MVC4-UKBR.domain1.systemhost.net>
Errors-To: owner-nanog@merit.edu
On Fri, 26 Oct 2007, michael.dillon@bt.com wrote:
...
> Juniper SSG (formerly Netscreen) supports IPv6 in ScreenOS 6.0 and up.
...
FWIW, there are typically notable differences in v6 feature parity vs
v4. So for those folks that are actually using this stuff "supports
v6 -- check!" isn't good enough and may result in some nasty surprises
later on.
For example, Netscreens cannot presently filter IPv6 in transparent
(bridged) mode, only in routed mode. The feature is AFAIK in the
roadmap but over a year away.
--
Pekka Savola "You each name yourselves king, yet the
Netcore Oy kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
