All,

On the J-series and branch SRX, if you want to use selective packet mode (because you want to do IPSec at the same time as MPLS, for example) then, as I understand it, you need to exclude traffic *to* the box itself from packet mode.

Is this correct?

Does anyone have a handy op-script that will build a prefix list of all local IPs, to help with automating this?
_______________________________________________
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to