Hello all. I've been going over some thoughts about scaling MPLS LDP authentication in an environment where all MPLS LER's or LSR's on the same subnet require LDP authentication.
I've had a look at the 'mpls ldp password option' and 'mpls ldp password required' features, but these require local ACL's be built and maintained, which also doesn't appear to scale well across several routers, at first glance. Some fora suggest LDP authentication only be enabled on "untrusted LDP peerings". I'd be happy to hear the current practice most folk adopt. Cheers, Mark.
pgp4rAX8eta9i.pgp
Description: PGP signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
