> It uses the same path as the control traffic, i.e. OSPF, BGP, IS-IS > packets, FPC health monitoring etc.
Fantastic. > Incidentally, I highly recommend placing a spoof-protect filter on your > fxp0 interface (something like: from source-address fxp0-network; > dest-addr fxp0-network; then accept; rest then reject), because all > packets entering fxp0 (e.g., broadcasts) with a non-fxp0-network > destination will be sent to the PFE and be forwarded there. So probably its is better to set up a virtual router instance and move the fxp0 interface into it and use that for management and get the rib/fib separated from the global instance? Cheers Patrik _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
