Re: [c-nsp] Cisco Infra DDOS Protection

2012-09-23 Thread Dobbins, Roland
On Sep 23, 2012, at 5:56 PM, Phil Mayers wrote: > For a 7600 chassis? Do sup2T work in that "post-BU-split" (ah, them were the > days!) Yes, Cisco recently announced that 7600 will now support Sup2T and DFC4 on 7600. --- Rolan

Re: [c-nsp] Cisco Infra DDOS Protection

2012-09-23 Thread Phil Mayers
On 09/23/2012 01:02 AM, Dobbins, Roland wrote: On Sep 21, 2012, at 11:49 PM, ar wrote: What could be a good replacement for 7600s to overcome this limitation? ASR9K?Nexus7K? You don't have to replace the box. Just replace the supervisor with a Sup2T and upgrade any DFC3 linecards to DFC4s (

Re: [c-nsp] Cisco Infra DDOS Protection

2012-09-22 Thread Dobbins, Roland
On Sep 21, 2012, at 11:49 PM, ar wrote: > What could be a good replacement for 7600s to overcome this limitation? > ASR9K?Nexus7K? You don't have to replace the box. Just replace the supervisor with a Sup2T and upgrade any DFC3 linecards to DFC4s (CFC linecards are fine). > I am still resear

Re: [c-nsp] Cisco Infra DDOS Protection

2012-09-21 Thread ar
cisco-nsp NSP Sent: Friday, September 21, 2012 3:57 PM Subject: Re: [c-nsp] Cisco Infra DDOS Protection On Sep 21, 2012, at 1:44 PM, ar wrote: > What's the accuracy and response time of netflow in ddos detection? Answering this question separately, it works quite well, as long as the

Re: [c-nsp] Cisco Infra DDOS Protection

2012-09-21 Thread Dobbins, Roland
On Sep 21, 2012, at 1:44 PM, ar wrote: > What's the accuracy and response time of netflow in ddos detection? Answering this question separately, it works quite well, as long as the exporting devices provide quality flow telemetry (Cisco pre-Sup2T/-DFC4 6500s & 7600s have severe NetFlow limitat

Re: [c-nsp] Cisco Infra DDOS Protection

2012-09-21 Thread Dobbins, Roland
On Sep 21, 2012, at 1:44 PM, ar wrote: > What's your DDOS protection for your Cisco SP infra. Network infrastructure devices such as routers and layer-3 switches must protect themselves via BCPs such as iACLs and CoPP. > I believe Cisco offers Clean Pipes 2.0 solution using Arbor. This solu

[c-nsp] Cisco Infra DDOS Protection

2012-09-20 Thread ar
Hi Guys. What's your DDOS protection for your Cisco SP infra. I believe Cisco offers Clean Pipes 2.0 solution using Arbor. What's the accuracy and response time of netflow in ddos detection? what bout checkpoint for large service providers? ___ cisco-ns