[c-nsp] Internet inside a VRF?

[Gert Doering]

Hi,

On Wed, Mar 14, 2012 at 01:12:02PM +1300, Pshem Kowalczyk wrote:
> In my previous role we've done just that. One internet VRF for all
> transit functions, separate vrfs for peering and customers and
> import-export statements to tie them all together. 

What is the benefit?  The obvious drawback is "much more complicated,
more possible ways things can blow up, and more effort to setup and
maintain".

(We currently run Internet in the global table, and do not currently
intent to change that due to "if we make it more complicated, people
will make more interesting mistakes")

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 305 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20120314/b15fc804/attachment-0001.sig>