Juniper JUNOS OS 10.4 - RELEASE NOTES REV 5 Release Note page 94

JUNOS OS 10.4 Release Notes
94
Aggressive mode or main mode
st0 anchored on the loopback (lo0) interface
Maximum number of virtual routers supported on an SRX Series device
Applications such as Application Layer Gateway (ALG), Intrusion Detection and
Prevention (IDP), and Unified Threat Management (UTM)
Dead peer detection (DPD)
Chassis cluster active/backup
OSPF over st0
RIP over st0
[Junos OS Administration Guide for Security Devices, Junos OS CLI Reference, Junos OS
Security Configuration Guide]
IPv6 Support
Active/active chassis cluster—This feature is supported on all SRX Series and J Series
devices.
In Junos OS Release 10.4, SRX Series and J Series devices running IP version 6 (IPv6)
can be deployed in active/active (failover) chassis cluster configurations in addition
to the existing support of active/passive (failover) chassis cluster configurations. [Junos
OS Security Configuration Guide]
Address books and address sets in active/active chassis cluster—This feature is
supported on all SRX Series and J Series devices.
This feature is supported in active/active chassis cluster configurations in addition to
the existing support of active/passive chassis cluster configurations.
SRX Series and J Series devices running IP version 6 (IPv6) deployed in active/active
(failover) chassis cluster configurations, the address book entries can include any
combination of IPv4 addresses, IPv6 addresses, and Domain Name System (DNS)
names.
To configure IPv6 address entries, specify an IPv6 address when you use the
statement at the [
edit security zones security-zone name address-book
The address set configuration considers names of the address book entries, and not
the IP addresses, so there are no additional considerations related to IPv6 traffic. [Junos
OS Security Configuration Guide]
Advanced flow—This feature is supported on all SRX Series and J Series devices.
IPv6 advanced flow adds IPv6 support for firewall, NAT, NAT-PT, multicast (local link
and transit), IDP, Junos framework, TCP proxy, and session manager on SRX Series
and J Series devices. MIBs are not used in the IPv6 flow.
IPv6 security is available to avoid impact on the existing IPv4 system. If IPv6 security
is enabled, extended sessions and gates are allocated. The existing address fields and
address
] hierarchy level.
Copyright © 2011, Juniper Networks, Inc.