On (2012-11-06 00:35 -0900), Christopher E. Brown wrote: > And I have tested and seen exactly the opposite with 10.4R10 in both > MX80 and all trio MX960.
So chances are, in 10.4 instances policers are shared and 11.4 not shared. This is kind wacky if behaviour has been changed like that. As people might have dimensioned their IP option policers to near maximum in 10.4 and if 11.4 it's for each instance, you might expose yourself to new attack vector. I wonder what is intended/documented behaviour. -- ++ytti _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
