MPLS VPN design - RR in forwarding path?

2014-12-31 Thread Marcin Kurek
Hi everyone, I'm reading Randy's Zhang BGP Design and Implementation and I found following guidelines about designing RR-based MPLS VPN architecture: - Partition RRs - Move RRs out of the forwarding path - Use a high-end processor with maximum memory - Use peer groups - Tune RR routers for

Re: MPLS VPN design - RR in forwarding path?

2014-12-31 Thread Ca By
On Wednesday, December 31, 2014, Marcin Kurek not...@marcinkurek.com wrote: Hi everyone, I'm reading Randy's Zhang BGP Design and Implementation and I found following guidelines about designing RR-based MPLS VPN architecture: - Partition RRs - Move RRs out of the forwarding path - Use a

Re: MPLS VPN design - RR in forwarding path?

2014-12-31 Thread Nick Hilliard
On 31/12/2014 12:08, Marcin Kurek wrote: I'm reading Randy's Zhang BGP Design and Implementation and I found following guidelines about designing RR-based MPLS VPN architecture: - Partition RRs - Move RRs out of the forwarding path - Use a high-end processor with maximum memory - Use peer

Contact domain messagelabs.com

2014-12-31 Thread Welisson
Hello Guys, So, is there anyone responsible by domain messagelabs.com here at list? I'm trying contact them , but no successful. Tks and Happy Holidays Welisson Tomé

Re: The state of TACACS+

2014-12-31 Thread Clay Curtis
Far too much discussion on this IMO. If you're that paranoid about it, just use the nuclear launch keys approach. Create the local account password, split it, give half of it to one party, half to the other. Then two separate parties must be engaged to use the account. Done. Sincerely, Clay

Re: MPLS VPN design - RR in forwarding path?

2014-12-31 Thread joel jaeggli
On 12/31/14 4:08 AM, Marcin Kurek wrote: Hi everyone, I'm reading Randy's Zhang BGP Design and Implementation and I found following guidelines about designing RR-based MPLS VPN architecture: - Partition RRs - Move RRs out of the forwarding path I'd find it odd if the RR were the nexthop for

Re: MPLS VPN design - RR in forwarding path?

2014-12-31 Thread Chuck Anderson
On Wed, Dec 31, 2014 at 01:08:15PM +0100, Marcin Kurek wrote: Hi everyone, I'm reading Randy's Zhang BGP Design and Implementation and I found following guidelines about designing RR-based MPLS VPN architecture: - Partition RRs - Move RRs out of the forwarding path - Use a high-end

Re: MPLS VPN design - RR in forwarding path?

2014-12-31 Thread Saku Ytti
On (2014-12-31 12:05 -0500), Chuck Anderson wrote: Hey, are the RRs, via an MPLS LSP for example. That latter is fine in many cases, the former is not. E.g. I would argue that a P-router can be an RR if desired. There is no compelling advantage. No budget is too thin for 3 gray NPE-G1, if

Re: MPLS VPN design - RR in forwarding path?

2014-12-31 Thread Jeff Tantsura
Hi, Right, one is when besides forwarding packets a router also functioning as a RR, another - when RR sets NH to itself and hence forces all the traffic to pass thru the router in fast path. Keep in mind - some architectures, such as seamless MPLS would require a RR to be in the fast path.

Re: MPLS VPN design - RR in forwarding path?

2014-12-31 Thread Randy Bush
- Move RRs out of the forwarding path this remains contentious. there are those who think having the control plane not congruent to the data plane is a recipe for really fun debugging and has other issues. randy

Re: MPLS VPN design - RR in forwarding path?

2014-12-31 Thread Stephen Lee
. Yn - Reply message - From: Randy Bush ra...@psg.com To: Marcin Kurek not...@marcinkurek.com Cc: North American Network Operators' Group nanog@nanog.org Subject: MPLS VPN design - RR in forwarding path? Date: Wed, Dec 31, 2014 9:36 PM - Move RRs out of the forwarding path this remains