[c-nsp] ASR - modular image

Mohacsi Janos mohacsi at niif.hu
Wed Mar 25 05:56:36 EDT 2009




On Wed, 25 Mar 2009, Julio Arruda wrote:

>> 
>> - The device has more horse-power and potential capabilities than 7200 with 
>> any NPE. It survived several DoS attacks, while 7200 died.
>
> Interesting, the Control-plane in the IOS-XE, from what I understand, is not 
> the legacy piece IOS, correct ? Is this better DDoS survival because of the 
> raw CPU power being better, or because the attack was against a downstream 
> customer ? The IP under attack was the router itself ? Or even better, it was 
> some attack that would 'punt' traffic from the QFP to the Route processor ?

DoS attacks against the downstream customer. I would be interested in the 
mitigating possibilities for the other possibilities with ASR 1000.

Best Regards,
 		Janos Mohacsi

>> For summary, the ASR100 platform for WAN aggregation is quite ready yet, 
>> potentially it will be good in a year time.
>> 
>> Best Regards,
>>         Janos Mohacsi
>> 
>>


More information about the cisco-nsp mailing list