09-25-2009 12:28 AM
As stated here, Junos with enhanced services applies no security Processing to IPv6 Packets.
Therefore it is not possible to filter host-inbound or forwarded IPv6 traffic.
Will this get fixed in the foreseeable future?
09-30-2009 07:33 AM
Branch SRX and J-Series JUNOS Software has the option to bypass flow processing for inet6
This is done by configuring packet-based forwarding for inet6 family.
security {
forwarding-options {
family {
inet6 {
mode packet-based;
}
}
}
}
If this worked for you please flag my post as an "Accepted Solution" so others can benefit.
A kudo would be cool if you think I earned it.