Decent IPv6 firewall with failover?

George Bonser gbonser at seven.com
Mon May 17 09:46:33 CEST 2010



> -----Original Message-----
> From: Gert Doering [mailto:gert at space.net]
> Sent: Monday, May 17, 2010 12:36 AM
> To: George Bonser
> Cc: ipv6-ops at lists.cluenet.de
> Subject: Re: Decent IPv6 firewall with failover?
> 
> Hi,
> 
> On Sun, May 16, 2010 at 11:52:56PM -0700, George Bonser wrote:
> > Does anyone have any recommendations for a medium sized firewall
(say
> > something in the ASA5550 class) that can do failover?
> 
> Juniper/Netscreen SSG with ScreenOS 6.2 and up will do IPv6 + NSRP
> failover just perfectly - full session takeover, etc.
> 
> Gert Doering
>         -- NetMaster
> --

That is what I am leaning towards but I believe Juniper is trying to
phase out the ScreenOS stuff, though I am more familiar with it than the
JunOS.  I have some experience with ScreenOS and am more at home with
its "quirks".

Judging from recent traffic on the NANOG list, the SSG is more stable
than the SRX and stability is more of my concern than ease of
administration.

Thanks.

George



More information about the ipv6-ops mailing list