Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation

forwarding-options (Security)

Syntax

forwarding-options {family {inet6 {mode (drop | flow-based | packet-based); }iso {mode packet-based;}mpls {mode packet-based;}}}

Hierarchy Level

[edit security]

Release Information

Statement introduced in Release 8.5 of Junos OS.

Description

Determine how the inet6, iso, and mpls protocol families manage security forwarding options.

Note:

  • Packet-based processing is not supported on the following SRX Series devices: SRX1400, SRX3400, SRX3600, SRX5400, SRX5600, and SRX5800.
  • On SRX Series devices, the default mode for processing traffic is flow mode. To configure an SRX Series device as a border router, you must change the mode from flow-based processing to packet-based processing. Use the set security forwarding-options family mpls mode packet-based statement to configure the SRX device to packet mode. You must reboot the device for the configuration to take effect.

Options

The remaining statements are explained separately. See CLI Explorer.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Modified: 2016-07-01