Configuring Selective Stateless Packet-Based Services

Selective stateless packet-based services allow you to use both flow-based and packet-based forwarding simultaneously on a system. You can selectively direct traffic that requires packet-based, stateless forwarding to avoid stateful flow-based forwarding by using stateless firewall filters (ACLs). The traffic not so directed follows the default flow-based forwarding path. Bypassing flow-based forwarding can be useful for traffic for which you explicitly want to avoid flow session-scaling constraints.

For information about which devices support the features documented in this chapter, see the Junos OS Feature Support Reference for SRX Series and J Series Devices.

This chapter contains the following topics. For more information about configuring the stateless firewall filters, see the Junos OS Routing Protocols and Policies Configuration Guide for Security Devices.

• Understanding Packet-Based and Flow-Based Forwarding
• Understanding Selective Stateless Packet-Based Services
• Configuring Selective Stateless Packet-Based Services
• Example: Configuring Selective Stateless Packet-Based Services—End-to-End Packet-Based
• Verifying the Selective Stateless Packet-Based Services Configuration—End-to-End Packet-Based
• Example: Configuring Selective Stateless Packet-Based Services—Packet-Based to Flow-Based
• Verifying the Selective Stateless Packet-Based Services Configuration—Packet-Based to Flow-Based