[Prev][Next][Report an Error]

Configuring Security Forwarding (J-Web Procedure)

If your device is operating in secure context, the inet6, International Organization for Standards (ISO), and MPLS protocol families are disabled on the device by default. You must enable these protocol families for a device in secure mode to forward IPv6, IS-IS, and MPLS packets. For more information on packet forwarding, see the JUNOS Software Interfaces and Routing Configuration Guide.

To configure packet forwarding using the J-Web configuration editor:

  1. Select Configure>Security>Forwarding. The Forwarding Configuration page appears.
  2. Fill in the options as shown in Table 149.
  3. Click one:

Table 149: Security Forwarding Configuration Options

Field

Function

Action

Forwarding Options

Enable packet-based IPv6

Supports IPv6 protocol traffic, including Routing Information Protocol for IPv6 (RIPng).

If your device is operating in secure context, IPv6 is disabled and the device drops IPv6 packets by default. You must enable IPv6 for a device in secure mode to enable forwarding of IPv6 packets.

For information about IPv6, see the JUNOS Routing Protocols Configuration Guide.

Default is flow mode. Select the check box to enable forwarding of IPv6 packets.

Enable packet-based ISO

Supports IS-IS traffic.

If your device is operating in secure context, the ISO protocol is disabled on the device by default. You must enable the ISO protocol for a device in secure mode to forward IS-IS packets.

Default is flow mode. Select the check box to enable forwarding of IS-IS packets.

Enable packet-based MPLS

Supports MPLS.

If your device is operating in secure context, MPLS is disabled on the device by default. You must enable the MPLS protocol to allow MPLS traffic to pass through.

Default is flow mode. Select the check box to enable forwarding of MPLS packets.

Caution: When you select this check box to enable packet-based MPLS, the following warning is displayed: “This will deactivate all security services. Are you sure?” If you select Yes, all security polices will be disabled. Disabling MPLS will not enable security policies. You can only enable security policies by using the CLI. For more information on security policies, see the JUNOS Software Security Configuration Guide.


[Prev][Next][Report an Error]