Barry Greene (bgreene) wrote:



E) There isn't any perceived new revenue to the network generated from
turning on sources address policing.

"E" is the #1 reason I've run into with SPs for not deploying source
address policing.

Agreed. In fact, if there was some way to make the application of source address policing in some way a /sine qua non/ for any ISP with end customer connections, then I think we would be most, if not all of the way there. Indeed one of the goals of SAVA would be to significantly increase the incentive to apply source address filtering.



Comment on the draft - L3 source validation we OK 10 years ago - but not
today. It has to be a L2/L3 source check today. This is why there are
more ports configured with DHCP Lease Query and IP Source Verify (both
L2/L3 source checks) then with uRPF Strict.

Agreed. In fact in the expanded framework that is being worked on, L2/L3 source checks in access networks is part of the picture.


_______________________________________________
routing-discussion mailing list
[EMAIL PROTECTED]
https://www1.ietf.org/mailman/listinfo/routing-discussion


--
"Product roadmap and/or product discussion in this email set forth
Juniper Networks' current intention and is subject to change at any
time without notice.  No purchases are contingent upon Juniper
Networks delivering any feature or functionality expressed or implied
in this roadmap or product discussion."
-----------------------------------------------------------------
Mark Williams                        Juniper Networks
Liaison                              Beijing Office
Academic Networking Sector           Tel: +86 10 6528 8800 x16032
Asia Pacific                         FAX: +61 7 3251 0155
[EMAIL PROTECTED]                      Cell: +86 1370-111-4749

_______________________________________________
Int-area mailing list
[email protected]
https://www1.ietf.org/mailman/listinfo/int-area

Reply via email to