Specifications

only for interfaces with inet address families and on MX Series routers with MPCs.
When you disable ARP policers per interface, the packets are continued to be policed
by the distributed DoS (DDoS) ARP policer. The maximum rate of is 10000 pps per
FPC.
[See Applying Policers.]
IPv6
•
Support for interim logging with NAT64 Starting with Junos OS Release 11.4R11,
interim-logging is supported with NAT64 on microkernel (MS-DPC) platforms. The
configuration statement pba-interim-logging-interval under the [interfaces
services-options] hierarchy level enables the feature for NAT64.
Management
•
Restrictions for crypto algorithms for FIPS in OpenSSH—Starting in Junos OS Release
13.3, the following options are not allowed on systems operating in FIPS mode:
[edit system services ssh]
set macs <algorithm>
Not allowed: hmac-md5, hmac-md5-96, [e-mail],
[e-mail], hmac-ripemd160,
[e-mail], [e-mail],
[e-mail], [e-mail], and
[e-mail].
[edit system services ssh]
set key-exchange <algorithm>
Not allowed: group-exchange-sha1, dh-group14-sha1, and dh-group1-sha1.
[edit system services]
set hostkey-algorithm <algorithm | no-algorithm>
Not allowed: ssh-dss and ssh-rsa.
Prior to Junos OS Release 13.3, the options were available but should have been
disallowed.
MPLS
•
Enhanced support for GRE interfaces for GMPLS (MX Series)—Starting in Junos OS
Release 12.3R7, 13.1R5, 13.2R5, 13.3R3 and later, on GRE interfaces for Generalized MPLS
control channels, you can enable the inner IP header’s ToS bits to be copied to the
outer IP packet header. Include the copy-tos-to-outer-ip-header statement at the [edit
interfaces gre unit logical-unit-number] hierarchy level. Previously, the
copy-tos-to-outer-ip-header statement was supported for GRE tunnel interfaces only.
[See copy-tos-to-outer-ip-header.]
•
Enhanced transit LSP statistics collection—Starting in Junos OS Release 13.3R4,
RSVP no longer periodically polls for transit LSP statistics. This change does not affect
the show mpls lsp statistics command or automatic bandwidth operations for ingress
57Copyright © 2015, Juniper Networks, Inc.
Changes in Behavior and Syntax