Hi, On Thu, Feb 14, 2013 at 09:49:50PM +1100, Andrew Miehs wrote: > And that leads to the next question - Which do you trust more, your > firewall vendors BGP implementation or VSS?
The whole point of BGP-to-the-next-device is that you do not have to
*trust* it. You filter what you accept...
(And getting the "announce the right bits plus keepalive" stuff in BGP
right is not that hard, even some firewall vendors can get it done)
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany [email protected]
fax: +49-89-35655025 [email protected]
pgpPMtO2h25ET.pgp
Description: PGP signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
