Thank you very much again. "No fragmentation" is a potential DoS vector but probably ok. The other limitations are similar to other vendors.
However, "No IPv6" is really unfortunate. With Google, Youtube and Facebook on IPv6 already, that could be a serious limitation. It is pretty sad that when it comes to >1Gbps firewalling, CNG is cheaper and easier to buy than native IPv6... /Benny _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
