JunOS is very cool, but the SRX's don't do IPv6 when in firewall mode (need to change to packet mode as above), and IPv6 also slows them down quite a lot, but this is less pronounced on the 11.* firmwares

On Tue, Mar 13, 2012 at 11:17 AM, Jodi <jodi@team.waspnet.co.nz> wrote:
> >
> > The SRX seems to me to be more a firewall than a router. I've got
> > Netscreen's handling access to services (reasonably proficient at
> > ScreenOS). I don't need firewall/IDP at the border just routing and
> > policing/shaping
>
> The J2320 is slower and about 2.5 times the price of the SRX220H (looking at
> RRP at a local distributor).
>
> The J2320 holds more BGP routes - but only 400k which is less than the global
> table right now so it's kind of a moot point.
> J2320 can also do 32 BGP peers while the SRX can only do 16.
> Other than that, for a small scale router the SRX is great.
>
> I run BGP signaled VPLS and L3VPNs with RSVP and IS-IS on the SRX just fine -
> there are no routing features sacrificed in favour of firewall features.
> It all runs JunOS.
>
> --

Cool I shall take a closer looksee :)


Cheers
JT
_______________________________________________
NZNOG mailing list
NZNOG@list.waikato.ac.nz
http://list.waikato.ac.nz/mailman/listinfo/nznog



--
Sam Russell

Network Operations
Research & Education Advanced Network NZ Ltd
ddi:�+64 4 913 6365
mob:�+64 21 750 819
fax:�+64 4 916 0064

http://www.karen.net.nz