Re: [j-nsp] Fwd: Re: BGP Multipath

2013-07-23 Thread Mark Tinka
On Sunday, July 21, 2013 09:40:29 AM Saku Ytti wrote: For eBGP this is manageable, as there must already be system for per-eBGP session configuration. To clarify my statement, if the sessions terminated on one router, then I'm happy to share the password as having two groups becomes another

Re: [j-nsp] Fwd: Re: BGP Multipath

2013-07-22 Thread Rodrigo Augusto
Enviado via iPhone Grupo Connectoway Em 21/07/2013, às 18:03, Mark Tinka mark.ti...@seacom.mu escreveu: On Sunday, July 21, 2013 09:40:29 AM Saku Ytti wrote: I'd really hope vendors would implement TCP-AO RFC, it would fix this problem right up, +1 for TCP-AO, especially for

Re: [j-nsp] Fwd: Re: BGP Multipath

2013-07-21 Thread Saku Ytti
On (2013-07-21 07:31 +0200), Mark Tinka wrote: I'd normally use different MD5 passwords for different BGP sessions, even though they are with to the same remote network. For eBGP this is manageable, as there must already be system for per-eBGP session configuration. For iBGP it's very

Re: [j-nsp] Fwd: Re: BGP Multipath

2013-07-21 Thread Mark Tinka
On Sunday, July 21, 2013 09:40:29 AM Saku Ytti wrote: I'd really hope vendors would implement TCP-AO RFC, it would fix this problem right up, +1 for TCP-AO, especially for authenticating RTR sessions in RPKI. Mark. signature.asc Description: This is a digitally signed message part.

Re: [j-nsp] Fwd: Re: BGP Multipath

2013-07-20 Thread Mark Tinka
On Friday, July 19, 2013 07:34:32 PM Keith wrote: We actually do some local-pref on some other upstreams for outbound but discovered a small wrinkle in that the new connection uses a different bgp auth key so I have to create a new bgp group to handle this connection. I'd normally use

[j-nsp] Fwd: Re: BGP Multipath

2013-07-19 Thread Keith
Thanks for the all the replies. We actually do some local-pref on some other upstreams for outbound but discovered a small wrinkle in that the new connection uses a different bgp auth key so I have to create a new bgp group to handle this connection. So a new question arises, can I use