Table of Contents
Advertisement
7.8.4 Stateful Firewall Configuration
[edit services]
user@router# show stateful-firewall
rule r1 {
match-direction input-output;
term t1 {
}
}
7.9 6rd + DS-Lite in Same Service Set
Juniper offers multiple transition mechanisms to address IPv4 address exhaustion. The extensive feature toolkit
includes support for NAT444, DS-Lite, and 6rd among other features. During transition to IPv6, or in an effort to enable
IPv6 services over IPv4 infrastructure, there might be situations where a provider might need to deploy both DS-Lite
and 6rd. 6rd can be configured with DS-Lite on the same PIC and in the same service set. The following subsections
show configuration details of such a scenario where both DS-Lite and 6rd are configured in the same service set.
7.9.1 Interfaces Configuration
Ingress interface:
ge-1/2/0 {
unit 0 {
}
}
Copyright © 2011, Juniper Networks, Inc.
then {
accept;
}
family inet {
service {
input {
service-set v6rd-dslite-service-set;
}
output {
service-set v6rd-dslite-service-set;
}
}
address 10.10.10.1/24;
}
family inet6 {
service {
input {
service-set v6rd-dslite-service-set;
}
output {
service-set v6rd-dslite-service-set;
}
}
address 2001::1/16;
}
IMPLEMENTATION GUIDE - 6rd Configuration Guide
21
Advertisement
Table of Contents
