Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

loopback-firewallv6-optimization

Syntax

Hierarchy Level

Description

Move IPv6 loopback filters to a separate single wide group and IPv6 address match to VFP. Can be used to increase IPv6 loopback filter scale when scale of IPv4 loopback filters are used in EVPN VXLAN deployments.

With EVPN/VXLAN, we can scale either 512 terms for IPv4 loopback filter or 512 terms for IPv6 loopback filter using set chassis loopback-firewall-optimization alone. If set chassis loopback-firewallv6-optimization is also enabled then we can achieve 512 terms each for IPv4 and IPv6 loopback filters.

Note:

Only supported on QFX5210.

When enabled, the CLI knob will lead to PFE restart.

Packet-length match condition will not be supported for IPv6 loopback filter which has any source/destination IPv6 address match. 

Required Privilege Level

interface

Release Information

Statement introduced in Junos 23.2