Table of Contents
Advertisement
Copyright © 2011, Juniper Networks, Inc.
New Features in Junos OS Release 10.4 for SRX Series Services Gateways and J Series Services Routers
gates are used to store the index of extended sessions or gates. If IPv6 security is
disabled, the IPv6 security related resources are not allocated.
New logs are used for IPv6 flow traffic to prevent impact on performance in the existing
IPv4 system.
The behavior and implementation of the IPv6 advanced flow are the same as those
of the IPv4 flow.
Some of the differences are as follows:
Header parse—IPv6 advanced flow stops parsing the headers and interprets the
packet as the corresponding protocol packet if it encounters the following extension
headers:
TCP/UDP
ESP/AH
ICMPv6
IPv6 advanced flow continues parsing headers if it encounters the following extension
headers:
Hop-by-Hop
Routing and Destination, Fragment
IPv6 advanced flow interprets the packets as an unknown protocol packet if it
encounters the extension header No Next Header.
Sanity checks—IPv6 advanced flow supports the following sanity checks:
TCP Length
UDP Length
Hop-by-Hop
IP data length error
Layer 3 sanity checks (for example, IP version and IP length)
ICMPv6 packets—In IPv6 advanced flow, the ICMPv6 packets share the same
behavior as normal IPv6 traffic with the following exceptions:
Embedded ICMPv6 Packet
Path MTU message
Host inbound and outbound traffic—IPv6 advanced flow supports all route and
management protocols running on the Routing Engine, including OSPF v3, RIPng,
Telnet, and SSH. Note that flow label is not used in the flow.
Tunnel traffic—IPv6 advanced flow supports the following tunnel types:
95
Advertisement
Table of Contents
