vSRX

  • 1.  MPLS not supported on vSRX with flow-based mode, right ?

    Posted 09-02-2021 05:25
    I have a topology with a vSRX as P router.  MPLS is not supported on it with flow-based mode, right ?

    thanks !!


  • 2.  RE: MPLS not supported on vSRX with flow-based mode, right ?

    Posted 09-02-2021 05:51
    The vSRX does have some support for mpls.  You can use the Feature Explorer tool to see what features are enabled and what version of Junos started them in.

    this can be done by platform like vSRX

    https://apps.juniper.net/feature-explorer/select-software.html?swName=vSRX&typ=2

    Or you can choose to look at a Junos version and see which feature is in that version with a list of platforms then that have that feature enabled.

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: MPLS not supported on vSRX with flow-based mode, right ?

    Posted 09-02-2021 11:12
    thanks a lot !!


  • 4.  RE: MPLS not supported on vSRX with flow-based mode, right ?

    Posted 09-02-2021 08:35

    You can change the forwarding mode of the vSRX to process MPLS frames, with thesett security forwarding-options family mpls mode packet-basedcommand.

    Refer to https://kb.juniper.net/InfoCenter/index?page=content&id=KB30461.

    Elvin


  • 5.  RE: MPLS not supported on vSRX with flow-based mode, right ?

    Posted 09-02-2021 11:12
    If I do this, I will turn off all the security functionality, such as firewall policies, right ?

    thanks so much !!


  • 6.  RE: MPLS not supported on vSRX with flow-based mode, right ?
    Best Answer

    Posted 09-02-2021 13:45
    It will switch it to stateless packet processing, so be cautious.

    Elvin


  • 7.  RE: MPLS not supported on vSRX with flow-based mode, right ?

    Posted 09-02-2021 15:52
    thanks !!


  • 8.  RE: MPLS not supported on vSRX with flow-based mode, right ?

    Posted 07-01-2022 19:19
    As other posters have noted, you can change the entire device to packet mode to gain mpls support. 

    You can, however, remain in flow mode and switch individual interfaces to packet mode, allowing configurations with both packet mode-only features (e.g., MPLS) and flow mode-only features (IPSec, stateful firewalling). You do this by leaving the box in flow mode overall. Interfaces are placed in packet-mode using filters with "then packet-mode" as the terminating action. 

    You can find a good example in NCE-140, "Configuring Branch SRX Series for MPLS over GRE with IPsec Segmentation."

    ------------------------------
    JASON DOUGLAS
    ------------------------------