On Thu, Feb 14, 2013 at 9:25 PM, Phil Mayers <[email protected]>wrote:

> On 02/14/2013 08:16 AM, Andrew Miehs wrote:
>
>  HOWEVER - on an MPLS network, I would connect the intervrf gateway/
>> firewall to a VSS PE.
>>
> Modulo the other thread; we use BGP to the firewall for this ;o)


And that leads to the next question - Which do you trust more, your
firewall vendors BGP implementation or VSS?

I am not a big fan of dynamic routing on firewall's anyway...
_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to