nanog mailing list archives

Re: IPv6 firewall support


From: Pekka Savola <pekkas () netcore fi>
Date: Sat, 27 Oct 2007 15:41:39 +0300 (EEST)


On Fri, 26 Oct 2007, michael.dillon () bt com wrote:
...
Juniper SSG (formerly Netscreen) supports IPv6 in ScreenOS 6.0 and up.
...

FWIW, there are typically notable differences in v6 feature parity vs v4. So for those folks that are actually using this stuff "supports v6 -- check!" isn't good enough and may result in some nasty surprises later on.

For example, Netscreens cannot presently filter IPv6 in transparent (bridged) mode, only in routed mode. The feature is AFAIK in the roadmap but over a year away.

--
Pekka Savola                 "You each name yourselves king, yet the
Netcore Oy                    kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings


Current thread: