Re: [j-nsp] Interconnect two VRFs via L2 security box with redundant path

2012-04-24 Thread Stefan Fouant
Comments in-line... On 4/24/2012 1:48 PM, Clarke Morledge wrote: Stefan, I was just hunting through your blog for ideas when I saw your post :-) Thanks for jumping in. A few responses in-line below. On Tue, 24 Apr 2012, Stefan Fouant wrote: If that adjacency goes down, a simple floating

Re: [j-nsp] Interconnect two VRFs via L2 security box with redundant path

2012-04-24 Thread Clarke Morledge
Stefan, I was just hunting through your blog for ideas when I saw your post :-) Thanks for jumping in. A few responses in-line below. On Tue, 24 Apr 2012, Stefan Fouant wrote: If that adjacency goes down, a simple floating static (static route w/ higher preference than the dynamic BGP/IS

Re: [j-nsp] Interconnect two VRFs via L2 security box with redundant path

2012-04-24 Thread Stefan Fouant
On 4/24/2012 12:44 PM, Clarke Morledge wrote: I have a design question to propose to the list. Suppose I have two VRFs in my MX routing core. Servers connect to one VRF (South) and the clients connect to the other VRF (North). I have a Layer2 security packet scrubbing box for inspecting traffic b

[j-nsp] Interconnect two VRFs via L2 security box with redundant path

2012-04-24 Thread Clarke Morledge
I have a design question to propose to the list. Suppose I have two VRFs in my MX routing core. Servers connect to one VRF (South) and the clients connect to the other VRF (North). I have a Layer2 security packet scrubbing box for inspecting traffic between my servers and clients. I have a