Delineation of public/non-controlled network to private/controlled network, would be my reasoning. Also, he is talking about an INTERNET connection. Why would you not firewall your ISP connection??? We run Cisco VPN across all of our (non-internet) Metro-E links, just to be able to say that we know our data is secure. HIPAA anyone?
Jonathan L. Raper, A+, MCSA, MCSE Technology Coordinator Eagle Physicians & Associates, PA jra...@eaglemds.com<BLOCKED::mailto:%20jra...@eaglemds.com> www.eaglemds.com<BLOCKED::http://www.eaglemds.com/> ________________________________ From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Wednesday, January 05, 2011 2:37 PM To: NT System Admin Issues Subject: RE: Metro Ethernet ? Firewall? Why are you routing that through a firewall? Our setup is our ISP's equipment is connected directly to a second core switch for Metro E. >>> "Paul Everett" <evere...@leementalhealth.org> 1/5/2011 2:16 PM >>> We recently went from a T1 Internet connection to 10meg Metro-E and we tested 10 megs to our ISP, but only 5 to Miami, 3 to Atlanta, and only 1meg to the West Coast. Our problem was our Firewall couldn't handle the throughput. Paul From: Brian Desmond [mailto:br...@briandesmond.com] Sent: Wednesday, January 05, 2011 11:37 AM To: NT System Admin Issues Subject: RE: Metro Ethernet ? Something is dirty somewhere. Could be a misconfigured port along the way, could be bad cabling, etc... Thanks, Brian Desmond br...@briandesmond.com<mailto:br...@briandesmond.com> c - 312.731.3132 From: Tom Miller [mailto:tmil...@hnncsb.org] Sent: Wednesday, January 05, 2011 8:21 AM To: NT System Admin Issues Subject: Metro Ethernet ? Folks, I am converting our network from point to point to MVLS/Metro Ethernet. What I am noticing at some sites is that performance is worse that with the point to point circuit. Ping times greatly increased, collisions, etc. I've been working with my provider to get this resolved. First they thought it was a speed mismatch issue, so the provider's equipment and my equipment were changed to the same setting (full 100). That's not working and now we'll probably change it to full 10 (since the allocation is 5 Mbps anyway). I can also do some rate shaping on my switches, but it's a PITA and I was hoping to avoid it. Anyone else have these issues with conversion? Some sites are fine, others are not. All have same switches, model, firmware, config for trunk ports. I haven't pulled out my bag o software to look at what's on the pipe, anyone have any that would be best for this scenario? I have Praesser but I really need a site to site test/analysis tool. I just downloaded Qcheck and will see if that does it. I've also asked my provider to give me some statistics on traffic they see. Recommendations and comments welcome. Tom Miller Engineer, Information Technology Hampton-Newport News Community Services Board 757-788-0528 Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin Confidentiality Notice: This e-mail message, including attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure, or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ________________________________ Any medical information contained in this electronic message is CONFIDENTIAL and privileged. It is unlawful for unauthorized persons to view, copy, disclose, or disseminate CONFIDENTIAL information. This electronic message may contain information that is confidential and/or legally privileged. It is intended only for the use of the individual(s) and/or entity named as recipients in the message. If you are not an intended recipient of this message, please notify the sender immediately and delete this material from your computer. Do not deliver, distribute or copy this message, and do not disclose its contents or take any action in reliance on the information that it contains. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin