About IPv6 Packet Header Verification Performed by the Flow Module for SRX Series and J-series Devices

This topic gives an overview of some of the IP version 6 (IPv6) packet header verification that the flow module for SRX Series and J-series devices performs.

To ensure the integrity of an IPv6 packet, the flow module performs the following sanity checks.

For all IPv6 packets, it checks the following parts of the header:

• TCP length
• UDP length
• Hop-by-hop extension to ensure that it follows the basic IPv6 header and does not come after another extension header
• That the IP data length error (IP length—total extension header length is not less than zero (<0)

  In addition to these verifications, the software performs other standard checks such as verifying that the correct IP version is specified and that the length of the IP address is correct.

For details on all of the packet verification, or sanity checks, that the flow module performs, see Understanding SRX5600 and SRX5800 Architecture and Flow Processing

Related Topics

• About the IPv6 Basic Packet Header
• Understanding IPv6 Packet Header Extensions
• About IPv6 Address Types and How Junos OS for SRX Series Services Gateway and J-series Devices Use Them
• About the IPv6 Address Format
• Understanding IP Version 6 (IPv6)