 | Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice. | |
You can configure a stateless firewall filter like the sample filter fragment-filter to address special circumstances associated with fragmented packets destined for the Routing Engine. Because the device evaluates every packet against a firewall filter (including fragments), you must configure the filter to accommodate fragments that do not contain packet header information. Otherwise, the filter discards all but the first fragment of a fragmented packet.
For details, see Configuring a Routing Engine Firewall Filter to Handle Fragments.
| Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice. | |