nanog mailing list archives
Re: IPv6 firewall support
From: Pekka Savola <pekkas () netcore fi>
Date: Sat, 27 Oct 2007 15:41:39 +0300 (EEST)
On Fri, 26 Oct 2007, michael.dillon () bt com wrote: ...
Juniper SSG (formerly Netscreen) supports IPv6 in ScreenOS 6.0 and up.
...FWIW, there are typically notable differences in v6 feature parity vs v4. So for those folks that are actually using this stuff "supports v6 -- check!" isn't good enough and may result in some nasty surprises later on.
For example, Netscreens cannot presently filter IPv6 in transparent (bridged) mode, only in routed mode. The feature is AFAIK in the roadmap but over a year away.
-- Pekka Savola "You each name yourselves king, yet the Netcore Oy kingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
Current thread:
- IPv6 firewall support michael.dillon (Oct 26)
- Re: IPv6 firewall support Ross Vandegrift (Oct 26)
- Re: IPv6 firewall support Chris Adams (Oct 26)
- Re: IPv6 firewall support Simon Lockhart (Oct 27)
- Re: IPv6 firewall support Jeroen Massar (Oct 27)
- Re: IPv6 firewall support Simon Lockhart (Oct 27)
- Re: IPv6 firewall support Jeroen Massar (Oct 27)
- Re: IPv6 firewall support Pekka Savola (Oct 27)
- Re: IPv6 firewall support Mark Prior (Oct 28)
- Re: IPv6 firewall support Randy Bush (Oct 28)
- Re: IPv6 firewall support David Freedman (Oct 29)
- Re: IPv6 firewall support Ross Vandegrift (Oct 26)