Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 

About IPv6 Packet Header Verification Performed by the Flow Module for SRX Series Devices

 

This topic gives an overview of some of the IP version 6 (IPv6) packet header verification that the flow module for SRX Series devices performs.

To ensure the integrity of an IPv6 packet, the flow module performs the following sanity checks.

For all IPv6 packets, it checks the following parts of the header:

  • TCP length

  • UDP length

  • Hop-by-hop extension to ensure that it follows the basic IPv6 header and does not come after another extension header

  • That the IP data length error (IP length—total extension header length is not less than zero (<0)

    In addition to these verifications, the software performs other standard checks such as verifying that the correct IP version is specified and that the length of the IP address is correct.