Table of Contents
Advertisement
JUNOS OS 10.4 Release Notes
100
IPv6 Network Address Translation (IPv6 NAT) provides address translation between
IPv6 hosts. NAT between IPv6 hosts is done in a similar manner and for similar purposes
as IPv4 NAT. IPv6 NAT in Junos OS provides the following NAT types:
Source NAT
Destination NAT
Static NAT
[Junos OS Security Configuration Guide]
NAT-PT—This feature is supported on all SRX Series and J Series devices.
IPv6 Network Address Translation-Protocol Translation (NAT-PT) provides address
and protocol translation between IPv4 and IPv6 addressed network devices. IPv6
NAT-PT supports both traditional NAT-PT and bidirectional NAT-PT. IPv6 NAT-PT
supports Internet Control Message Protocol (ICMP), TCP, and UDP protocol packets.
[Junos OS Security Configuration Guide]
Packet filtering—This feature is supported on SRX1400, SRX3400, SRX3600,
SRX5600, and SRX5800 devices.
The packet-filtering options for IPv6 addresses and IPv6 style source prefix, destination
prefix, and interface is supported in addition to the existing functionality of IPv4
datapath-debug.
[Junos OS Security Configuration Guide, Junos OS CLI Reference]
Screens—This feature is now supported on all SRX Series and J Series devices.
IPv6 support is extended for the following screen features:
Syn-flood/syn-proxy/syn-cookie
Syn-ack-ack-proxy
Ip-spoofing
[Junos OS Security Configuration Guide]
Zone configuration in active/active chassis cluster—This feature is supported on all
SRX Series and J Series devices.
In Junos OS Release 10.4, SRX Series and J Series devices running IP version 6 (IPv6)
can be deployed in active/active chassis cluster configurations with security zone
configuration in addition to the existing support of active/passive chassis cluster
configurations.
The security zone configuration considers names of the interfaces, and not the IP
addresses, hence there are no additional considerations related to the zone interface
configuration.
You can also use the zone configuration to explictly permit inbound traffic from network
system services and system protocols. Note that you can now use the host inbound
traffic configuration to permit traffic from the following IPv6-related services and
protocols: DHCPv6, neighbor discovery (ND) protocol, OSPF3, and RIPng. [Junos OS
Security Configuration Guide]
Copyright © 2011, Juniper Networks, Inc.
Advertisement
Table of Contents
