Re: [j-nsp] JunOS forwarding IPv6 packets with link-local source

Daniel Verlouw via juniper-nsp <[email protected]> Fri, 17 May 2024 12:05:40 +0200

Newsgroups	gmane.network.nsp.juniper
Message-ID	<CAALQXVLuqHVkBZrWjSuE3+YRPreFNz+J7w5_J=tZ_pPjkfRj2g@mail.gmail.com>

Hi,

On Thu, May 16, 2024 at 8:22 PM Antti Ristimäki via juniper-nsp
<[email protected]> wrote:
> I thought this issue had been resolved already years ago, but I
> noticed that JunOS still happily forwards IPv6 packets with link-local
> source address towards remote destinations. This of course violates
> RFC4291. Also recent JunOS releases seem broken, tested with e.g. 21.4
> and 23.2.

on MX:
set forwarding-options family inet6 source-checking

refer to: https://www.juniper.net/documentation/us/en/software/junos/cli-reference/topics/ref/statement/source-checking-edit-forwarding-options.html

--Daniel.
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp