mode (Forwarding-Options)

Syntax

mode (packet-based | flow-based | drop );

Hierarchy Level

[edit security forwarding-options family inet6]

Release Information

Support on SRX Series and J Series devices for flow-based mode for family inet6 added in Release 10.2 of Junos OS.

Description

Specify forwarding options for IPv6 traffic.

Options

drop—Drop IPv6 packets. This is the default setting.

flow-based—Perform flow-based packet forwarding.

packet-based—Perform simple packet forwarding. Packet-based mode is not available for SRX3400, SRX3600, SRX5400, or SRX5600. The option does not appear in the CLI for these devices.

Usage Guidelines

If you change the forwarding option mode for IPv6, you might have to perform a reboot to initialize the configuration change. Table 4 summarizes device status upon configuration change.

Table 4: Device Status Upon Configuration Change

Configuration Change	Commit Warning	Reboot Required	Impact on Existing Traffic Before Reboot	Impact on New Traffic Before Reboot
Drop to flow-based	Yes	Yes	Dropped	Dropped
Drop to packet-based	No	No	Packet-based	Packet-based
Flow-based to packet-based	Yes	Yes	None	Flow sessions created
Flow-based to drop	Yes	Yes	None	Flow sessions created
Packet-based to flow-based	Yes	Yes	Packet-based	Packet-based
Packet-based to drop	No	No	Dropped	Dropped

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.