On (2010-03-24 08:39 +0000), Dobbins, Roland wrote: > > There is no way to make IOS GSR undossable, > > This is incorrect. iACLs work just fine to protect GSRs, and every other > hardware-based platform.
Agreed. Just CoPP, rACL won't do it in GSR/IOS. So if you can create ACL on each and every interface of relevant, you're home golden. I'd say often this is not feasible, which is why we have rACL and CoPP. Of course if you are running older linecards, ingress ACL may not have hardware, but is purely in software (E0, E1). -- ++ytti _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
