Re: [nsp] Accepting ips from outside our network.

From: Danny McPherson (danny@tcb.net)
Date: Thu Jun 15 2000 - 20:21:54 EDT


Though poking holes in your ingress route filters isn't a good thing, you
really don't have any other options (when considering connectivity to the
destinations of the direct link to the customer becomes unavailable).

You should also note that depending on what range (first octet) the address
space is allocated from, the longer prefixes may be filtered by some
providers, which may cause problems if your link to the customer becomes
unavailable.

And don't forget, one /22 is still much better than four /24s :-)

-danny

> So if the link between us and our customer goes down they will not be able
> to reach our network? Should we poke holes in the traffic filters to allow
> packets from our customer to enter through our transit providers?



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:13 EDT