We’ve been working toward a more simplified model for our network path, and in doing so, we desired a congruent path for IPv6, IPv4 Multicast and IPv4 Unicast.
However, this is actually pretty hard when dealing with the link speeds, amounts of traffic and flows that we do, in conjunction with Firewall…..and IDP/IPS…
Lots of research, reading and testing was done.
Juniper SRX series has full support for 90% of this, with IPv6 IDP coming in Q2 of 2011.
*Cross posted from my personal blog since it’s a technical subject*
That is the million dollar question on many phone geeks minds.
The iPhone is really a love it or hate it kind of device, much like Apple stuff in general. Android, on the other hand, is still new enough that some folks are still ignoring it. Well, I wanted to know which worked better for me, and so I set out to test them both.
I have been fortunate enough to have had a decent smartphone for the last 8 or so years, and mid to
Nick Buraglio - Sep 6, 2010
We’ve found a at least one issue after this change. Apparently, our IKE ALG is no longer functioning as it was before.
I’m not terribly confident in the SRX ALG implementations, so I’ll be poking at juniper a but about that as I get time. they’ve been very responsive to our questions and issues so ar, I expect that this will either be fixed ASAP or pointed out as a problem on our end.
One of our plans is to consolidate as many of the egress trafic paths as possible. To facilitate this, we had to do some things like buy carrier grade equipment. Enter the SRX 5800. No one really does IPS/IDP+Firewall quite like the SRX. After extensive research and exhaustive hands on testing with quite a bit of equipment, that is what we settled on. Even the IBM “technical evangelist” guy that came to talk to us said “No one really does it like they do” when referring to Juniper and 10G firewall/IPS.
I’ve recently taken to thinking a lot more about IPv6. I’ve been using an HE tunnel for as long as I can remember at home. This poses an interesting question about addressing. Since I have not had a public address block at home for almost 7 years, I have been using NAT for IPv4. However, my IPv6 netblocks are a /64 and a /48, which are both far more address space than I could ever possibly use.
I know this is documented elsewhere, but this was a pain for me, so I wanted to take some notes. I have several Snow Leopard (MAcOS 10.6) Macs and a Netgear DNS-323. I want to mount the drive using NFS and any good UNIX admin would.
Unlike older versions of the Mac OS, NFS mounts are now handled under the Disk Utility application (which seems odd to me, but whatever).
Peter - Feb 3, 2012
Really helpful. I am not a very computer literate person and you always make things easy to understand. Thanks so much
portable wireless router
I knew a tool like this had to exist, but I had never needed to look in the past. While debugging a RA problem, I come upon the need to view IPv6 router advertisements. How can one do this? tcpdump? Yeah, I guess that could work. It’s almost like using a bulldozer when a wheelbarrow is all you need, though. I could use ndpmon, I suppose, but that, too seems like overkill.
I had been discussing IPv6 address precedence recently and realized that I’d never really messed with it. I have a FreeBSD host that has multiple IPv6 addresses, an EUI-64 address as well as a statically assigned address. If you don’t know what IPv6 or EUI-64 is, I suggest you brush up because IPv6 is coming and it’s coming sooner than you thing.
Using the ip6addrctl command I can manipulate which address is preferred for outbound connections.