Re: [j-nsp] urpf

2014-03-01 Thread Tlb
Default is to valid next-hop. This definitely helps as the generate route was option I had previously not explored. > --- > Date: Fri, 28 Feb 2014 17:38:58 -0500 > From: Chuck Anderson > To: juniper-nsp@puck.nether.net > Subject: Re: [j-nsp] ur

Re: [j-nsp] urpf

2014-02-28 Thread Chuck Anderson
On Fri, Feb 28, 2014 at 03:03:57PM -0700, thomas.bowlby wrote: > Installing some juniper routers as borders and need specifically RTBH > functionality. > This was accomplished by upgrading code to > 12.1 (specifically 12.3R4.5) and > including > 'set forwarding-options rpf-loose-mode-discard fam

[j-nsp] urpf

2014-02-28 Thread thomas.bowlby
Installing some juniper routers as borders and need specifically RTBH functionality. This was accomplished by upgrading code to > 12.1 (specifically 12.3R4.5) and including 'set forwarding-options rpf-loose-mode-discard family inet' 'set forwarding-options rpf-loose-mode-discard family inet6' I

Re: [j-nsp] uRPF loose mode

2012-11-26 Thread Gabriel Blanchard
On 12-11-26 10:05 AM, Saku Ytti wrote: > > This is very new feature to JunOS. I think 12.1 for T4k. And maybe 12.2 for > MX, unsure. > Thanks, I just got confirmation from Juniper that this is indeed supported as of 12.2 on MX. -Gabe ___ juniper-nsp

Re: [j-nsp] uRPF loose mode

2012-11-26 Thread Saku Ytti
On (2012-11-26 09:54 -0500), Gabriel Blanchard wrote: > Has anyone on this list been able to implement uRPF to work in a > multi-homed environment? I'm trying to implement it so that it black > holes traffic based on source address and so far what I've read tells me > this is not supported. This

[j-nsp] uRPF loose mode

2012-11-26 Thread Gabriel Blanchard
Has anyone on this list been able to implement uRPF to work in a multi-homed environment? I'm trying to implement it so that it black holes traffic based on source address and so far what I've read tells me this is not supported. -Gabe ___ juniper-nsp ma

Re: [j-nsp] uRPF and 0.0.0.0/0

2009-08-25 Thread Clue Store
I should have included some additional info in my original post. It "appears" that the default is not just accepting all packets as per the show commands below. m...@m10i> show firewall log Log : Time FilterAction Interface Protocol Src Addr Dest Addr 10:0

Re: [j-nsp] uRPF and 0.0.0.0/0

2009-08-25 Thread Chris Adams
Once upon a time, Clue Store said: > So im still a little unclear if my config is sane in the fact that I do not > have a default route pointing to any interface, but I do have a > 0.0.0.0/0discard as shown below. This is to inject a default inwards > for OSPF, but > does not specify an interface.

Re: [j-nsp] uRPF and 0.0.0.0/0

2009-08-25 Thread Roland Dobbins
On Aug 25, 2009, at 9:51 PM, Clue Store wrote: Does this config hose up uRPF (either loose or strict)?? There's an 'allow-default' option for Cisco routers, unsure about Juniper - but would be surprised if there isn't one for Js, as well. -

[j-nsp] uRPF and 0.0.0.0/0

2009-08-25 Thread Clue Store
Hi All, Trying to get uRPF working in strict mode and seems to be working fine (other than the fact i'm just accepting all traffic via my fail-filter). As I was searching the archives, I found this thread which still doesn't make it clear about a default route. http://markmail.org/message/cx5jq6t

Re: [j-nsp] uRPF

2006-12-20 Thread Jared Gull
Manu, See the link below: http://www.juniper.net/techpubs/software/junos/junos81/swconfig81-network-interfaces/html/interfaces-family-config29.html Hths... Jared --- Manu Chao <[EMAIL PROTECTED]> wrote: > Until now, i am using Firewall Filter in order to > control source-ip @ from > customers.

[j-nsp] uRPF

2006-12-20 Thread Manu Chao
Until now, i am using Firewall Filter in order to control source-ip @ from customers. Does JUNOS support uRPF like Cisco IOS? How the uRPF JUNOS configuration look like? Regards Manu ___ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.