Re: [j-nsp] MX80 anti-spoofing filter
-Original Message- From: juniper-nsp [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Mark Tinka Sent: Wednesday, December 17, 2014 1:06 AM To: juniper-nsp@puck.nether.net Subject: Re: [j-nsp] MX80 anti-spoofing filter That's what we do. Mark. +1. We have a 'bgp-customers' prefix-list which includes not only our customer's networks, but the networks in our own IP space that our customers use for BGP. -evt ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] SRX High-end Packet mode
I have three questions about packet mode on high-end SRX firewalls - Is it supported on SRX high-end firewalls to switch the firewall to packet mode altogether using the below command which supported on branch firewalls;(set security forwarding-options family mpls mode packet-based) - Is it supported on SRX high-end firewalls to partially convert some traffic to packet mode (selective packet forwarding using filters)? - Is it possible to operate MPLS on SRX high-end firewalls without enabling packet-mode? Thanks RegardsMahmoud ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
[j-nsp] SSD on RE-A-2000
Hi, I was wondering if anyone on the list has had success replacing the hard disk on the RE-A-2000-4096 with a small SSD? If so, any tips or gotchas? Thanks, Kevin ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] SRX High-end Packet mode
Hi Mahmoud, On Thu, Dec 18, 2014 at 4:34 AM, M Abdeljawad via juniper-nsp juniper-nsp@puck.nether.net wrote: I have three questions about packet mode on high-end SRX firewalls - Is it supported on SRX high-end firewalls to switch the firewall to packet mode altogether using the below command which supported on branch firewalls;(set security forwarding-options family mpls mode packet-based) - Is it supported on SRX high-end firewalls to partially convert some traffic to packet mode (selective packet forwarding using filters)? - Is it possible to operate MPLS on SRX high-end firewalls without enabling packet-mode? Packet mode is not supported on HE SRX at all. Neither is MPLS. Comparison of features supported on SRX650 with SRX5600: http://pathfinder.juniper.net/feature-explorer/compare-platforms.html?swName=Junos+OStyp=1#bm=cmphwpl1=SRX650pl2=SRX5600rel=12.1X46-D25 Cheers, Dale ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
Re: [j-nsp] SRX High-end Packet mode
Hi Mahmoud, On 18 Dec 2014, at 3:34 am, M Abdeljawad via juniper-nsp juniper-nsp@puck.nether.net wrote: I have three questions about packet mode on high-end SRX firewalls - Is it supported on SRX high-end firewalls to switch the firewall to packet mode altogether using the below command which supported on branch firewalls;(set security forwarding-options family mpls mode packet-based) Feature navigator seems to suggest they can support packet-based for IPv6 [1] (not MPLS) in 12.1X44, but the SRX Series Book (older) suggest packet-mode is branch-only [2]. - Is it supported on SRX high-end firewalls to partially convert some traffic to packet mode (selective packet forwarding using filters)? I don't believe so - Is it possible to operate MPLS on SRX high-end firewalls without enabling packet-mode? No Cheers, Ben [1] http://pathfinder.juniper.net/feature-explorer/ [2] https://books.google.com.au/books?id=2HSLsTJIgEQCpg=PA163lpg=PA163dq=srx+packet-mode+mplssource=blots=_fxiZyPIytsig=tIuoDMgJWzpRyHCiIXyMKU-KNdohl=ensa=Xei=tgqSVLDtIMv08QX9yIHACwved=0CCIQ6AEwATgK#v=onepageq=srx%20packet-mode%20mplsf=false ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
