On 4 Jan 2016, at 18:15, Roland Dobbins wrote:
Have you checked the configuration to ensure that there is in fact no tunnel on those FPCs? And have you analyzed the traffic to/from that box to ensure that it isn't speaking GRE on the relevant IP(s)?
And have you deployed iACLs to ensure that random hosts can't send traffic directly to the relevant IPs on this box?
----------------------------------- Roland Dobbins <[email protected]> _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
