[c-nsp] 7600 w/ SUP720 IOS recommendation?

[sthaug at nethelp.no]

> IIRC, SXD contains control-plane policing which can be useful - I
> don't *think* it's in SXB. (I'm paranoid having lost 7200s to looped
> exchange points more than once hence wanting policing, but I've heard
> that even without it the 7600 can cope with ~1Gb/s of broadcast
> rubbish thrown at it)

>From personal experience, 7600 (even with Sup2/MSFC2/PFC2) handles
Gigabit-sized DDoS attacks just fine. You just need to have your MSFC
sufficiently well protected with ACLs and hardware policing (this was
well before any control plane policing functionality was available).

Steinar Haug, Nethelp consulting, sthaug at nethelp.no