■ Default idle timeout value for UDP- and TCP-based applications—Upon
identification by AppID, the default idle timeout value is set to 30 seconds for
UDP-based applications and 1 hour for TCP-based applications. These settings
can be overridden by including the idle timeout statement at the [edit services
application-identification application application] hierarchy level.
[Services Interfaces]
■ New statement to bypass traffic on exceeding flow limit—If the flow in the
service-set crosses the maximum limit set by the max-flow statement, the
bypass-traffic-on-exceeding-flow-limits allows the packets to bypass without
creating a new session. Following are the required privilege levels:
■ interface—To view the statement in the configuration
■ interface-control—To add the statement to the configuration
[Services Interfaces]
■ Diffie-Hellman group5 added to group1 and group2—The group5 designation
specifies that IKE should use the 1536-bit Diffie-Hellman prime modulus group
when performing the new Diffie-Hellman exchange. To configure the
Diffie-Hellman group for an IKE proposal, include the dh-group statement at the
[edit services ipsec-vpn ike proposal proposal-name] hierarchy level:
[edit services ipsec-vpn ike proposal proposal-name]
dh-group (group1 | group2| group5);
[Services Interfaces]
■ Permanent limitation for session-timeout on APPID—If session-timeout is
configured for an APPID application, a session for that application will be cleared
once the session-timeout expires. Once the same session is re-created as a new
session, it will not be identified by APPID.
[Services Interfaces]
■
Integrated Multi-Services Gateway (IMSG)—The clear services
border-signaling-gateway gateway-name statistics command no longer clears the
active calls counter.
[System Basics and Services Command Reference]
■ New configuration statements for assigning policies—The following
configuration statements at the [edit services border-signaling-gateway gateway-name
service-point service-point-name service-policies] hierarchy level have been
deprecated and replaced by new statements:
■
new-call-usage-policies [policy-and-policy-set-names]
■
new-transaction-policies [policy-and-policy-set-names]
Each statement applied policies to calls or transactions entering at the service
point. Each is replaced by statements that explicitly apply policies to transactions
or policies entering the service point or exiting from the service point. The new
statements are:
■
new-call-usage-input-policies [policy-and-policy-set-names]
■
new-call-usage-output-policies [policy-and-policy-set-names]
Changes in Default Behavior and Syntax in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers ■ 49
Changes in Default Behavior and Syntax in JUNOS Release 10.1 for M Series, MX Series, and T Series Routers
To Next Page
Loading...
Need help?
General
