[152049] in North American Network Operators' Group
Re: Cheap Juniper Gear for Lab
daemon@ATHENA.MIT.EDU (Mark Kamichoff)
Tue Apr 10 21:02:58 2012
Date: Tue, 10 Apr 2012 21:02:07 -0400
From: Mark Kamichoff <prox@prolixium.com>
To: Owen DeLong <owen@delong.com>
In-Reply-To: <0DE1A05A-F993-47FC-B04E-48B362D80F8F@delong.com>
X-SA-Exim-Mail-From: prox@prolixium.com
Cc: jgoodwin@studio442.com.au, "nanog@nanog.org" <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--mP3DRpeJDSE+ciuQ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Tue, Apr 10, 2012 at 11:57:31AM -0700, Owen DeLong wrote:
> > The fact that you can't put it into flow mode.
> s/flow/packet/
> (oops, wasn't awake yet)
Actually, this is possible:
prox@asgard> show configuration security =20
forwarding-options {
family {
inet6 {
mode packet-based;
}
mpls {
mode packet-based;
}
}
}
The above is from an SRX210B, but the same configuration will work on
any J-series or /branch/ SRX-series platform.
Don't let the "mpls" keyword throw you off. This actually causes the
box to run the inet /and/ mpls address families in packet mode.
- Mark
--=20
Mark Kamichoff
prox@prolixium.com
http://www.prolixium.com/
--mP3DRpeJDSE+ciuQ
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iEYEARECAAYFAk+E2A8ACgkQ0TYC9KtF8BMKbACfb29mWOGD2pTlZ+zvyrtFG7xz
aVsAnAkzW5xv5tR0im1SGDg+KntJCnmt
=PrTK
-----END PGP SIGNATURE-----
--mP3DRpeJDSE+ciuQ--
