Routing Policy and Firewall Filters

Support for new options for the show route command (PTX10001-36MR, PTX10002-36QDD, PTX10003, PTX10004, PTX10008, PTX10016, and PTX12008)—We’ve introduced enhancements to the show route command to enable network operators understand and troubleshoot routing tables more easily. Use the prefix-length-distribution option to display counts of prefix lengths across routing tables for each instance. You can run the show route destinationcovering-subnets command to walk up the radix tree and list all routes covering a destination. These options provide deeper insight for troubleshooting and optimize routing behavior.

[See show route.]

Increased firewall filter scale (PTX10002-36QDD)—You can apply the prefix-scale-mode configuration on a firewall filter to increase its scale to up to 225,000 prefixes per term, and in total up to 1 million prefixes for IPv4, 512,000 for 64-bit IPv6, and 256,000 for 128-bit IPv6 as match conditions.

[See prefix-scale-mode.]

Apply selective class-based filtering without enabling SCU accounting and/or DCU accounting (PTX10002-36QDD, PTX10004, and PTX10008)—Use the class-based-filteringconfiguration to filter traffic without enabling source class usage (SCU) or destination class usage (DCU) accounting. Applying this configuration improves line-rate performance because SCU and/or DCU lookup is not performed for SCU and/or DCU accounting and only selective class-based filtering is performed.

[See class-based-filtering.]