[j-nsp] question about S/RTBH on DPC / MX's

2015-02-11 Thread John Brown
Hi, I've been doing some reading getting ready to implement S/RTBH using uRPF. Basically if i have a route in the FIB whose next-hop is NULL0 then uRPF Loose will discard the packet if that route is in the SOURCE addr of the packet. What I'm reading seems to indicate that this is available on a

Re: [j-nsp] SRX and MS Lynx

2015-02-11 Thread Mike Gonnason
Hi Bill, I have a Lync front end server deployed in a DMZ hung off an ASA (haven't had time yet to swap them out for SRX). We just have static NATs and the usual ACLs permitting the traffic. There are quite a few ACLs though, especially if you want to support Federation. Your Lync deployment peopl