Re: [j-nsp] SRX High-end Packet mode

2014-12-17 Thread Ben Dale
Hi Mahmoud,

On 18 Dec 2014, at 3:34 am, M Abdeljawad via juniper-nsp 
 wrote:

> I have three questions about packet mode on high-end SRX firewalls
> - Is it supported on SRX high-end firewalls to switch the firewall to packet 
> mode altogether using the below command which supported on branch 
> firewalls;(set security forwarding-options family mpls mode packet-based)

Feature navigator seems to suggest they can support packet-based for IPv6 [1] 
(not MPLS) in 12.1X44, but the SRX Series Book (older) suggest packet-mode is 
branch-only [2]. 

> - Is it supported on SRX high-end firewalls to partially convert some traffic 
> to packet mode (selective packet forwarding using filters)?

I don't believe so

> - Is it possible to operate MPLS on SRX high-end firewalls without enabling 
> packet-mode?

No

Cheers,

Ben

[1] http://pathfinder.juniper.net/feature-explorer/
[2] 
https://books.google.com.au/books?id=2HSLsTJIgEQC&pg=PA163&lpg=PA163&dq=srx+packet-mode+mpls&source=bl&ots=_fxiZyPIyt&sig=tIuoDMgJWzpRyHCiIXyMKU-KNdo&hl=en&sa=X&ei=tgqSVLDtIMv08QX9yIHACw&ved=0CCIQ6AEwATgK#v=onepage&q=srx%20packet-mode%20mpls&f=false




___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


Re: [j-nsp] SRX High-end Packet mode

2014-12-17 Thread Dale Shaw
Hi Mahmoud,

On Thu, Dec 18, 2014 at 4:34 AM, M Abdeljawad via juniper-nsp <
juniper-nsp@puck.nether.net> wrote:
>
> I have three questions about packet mode on high-end SRX firewalls
> - Is it supported on SRX high-end firewalls to switch the firewall to
packet mode altogether using the below command which supported on branch
firewalls;(set security forwarding-options family mpls mode packet-based)
> - Is it supported on SRX high-end firewalls to partially convert some
traffic to packet mode (selective packet forwarding using filters)?
> - Is it possible to operate MPLS on SRX high-end firewalls without
enabling packet-mode?

Packet mode is not supported on HE SRX at all. Neither is MPLS.

Comparison of features supported on SRX650 with SRX5600:
http://pathfinder.juniper.net/feature-explorer/compare-platforms.html?swName=Junos+OS&typ=1#bm=cmphw&pl1=SRX650&pl2=SRX5600&rel=12.1X46-D25

Cheers,
Dale
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp


[j-nsp] SRX High-end Packet mode

2014-12-17 Thread M Abdeljawad via juniper-nsp
I have three questions about packet mode on high-end SRX firewalls
- Is it supported on SRX high-end firewalls to switch the firewall to packet 
mode altogether using the below command which supported on branch 
firewalls;(set security forwarding-options family mpls mode packet-based)
- Is it supported on SRX high-end firewalls to partially convert some traffic 
to packet mode (selective packet forwarding using filters)?
- Is it possible to operate MPLS on SRX high-end firewalls without enabling 
packet-mode?
Thanks
RegardsMahmoud
___
juniper-nsp mailing list juniper-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp