forwarding-options (Security)
Syntax
Hierarchy Level
Release Information
Statement introduced in Junos OS Release 8.5.
secure-wire option introduced in Junos OS Release 19.3R1.
resource-manager option introduced in Junos OS Release 19.4R1 for vSRX.
mode option introduced in Junos OS Release 20.1R1.
no-allow-dataplane-sleep option introduced in Junos OS Release 20.3R1 for vSRX 3.0.
Description
Determine how the inet6, iso, and mpls protocol families manage security forwarding options.
Packet-based processing is not supported on the following SRX Series devices: SRX5400, SRX5600, and SRX5800.
On SRX Series devices, the default mode for processing traffic is flow mode. You can configure SRX Series devices to operate in packet mode to process MPLS packets.
To configure the packet mode on SRX Series device, use the following command:
user@host# set security forwarding-options family mpls mode packet-based
Selective stateless packet-based services allows you to configure the device to provide only packet-based processing for selected traffic based on input filter terms.
Starting in Junos OS Release 20.3R1, you can enable or disable dataplane sleep using the option no-allow-dataplane-sleep.
Options
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.