[c-nsp] Sup720 CoPP, limits on CPU performance

Gert Doering gert at greenie.muc.de
Wed Mar 24 05:30:52 EDT 2010


Hi,

On Wed, Mar 24, 2010 at 08:39:27AM +0000, Dobbins, Roland wrote:
> On Mar 24, 2010, at 2:55 PM, Saku Ytti wrote:
> 
> >  There is no way to make IOS GSR undossable,
> 
> This is incorrect.  iACLs work just fine to protect GSRs, and every other hardware-based platform.

iACLs don't work very well for routers that happen to have customer edges.

"Every time a new customer connects, and a new IP address is assigned to
an interface, update all your iACLs"?

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 305 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/cisco-nsp/attachments/20100324/3db64fce/attachment.bin>


More information about the cisco-nsp mailing list