[c-nsp] Private IP in SP Core

[Adam Vitkovsky]

>We use a dedicated IPv4 /24 for all core links which is heavily ACLed at
all external borders.
I also found it useful to use a separate range for loopback ip addresses -
as it works nicely with filters for prefix prioritization and label
allocation/advertisement. 

adam
-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Gert Doering
Sent: Monday, March 11, 2013 11:44 AM
To: Gordon Bryan
Cc: Gert Doering; Cisco NSP
Subject: Re: [c-nsp] Private IP in SP Core

Hi,

On Mon, Mar 11, 2013 at 10:18:31AM +0000, Gordon Bryan wrote:
> Can I ask what your thoughts are on core IP addressing? Do you have
specified global ranges for this purpose with matching  iACLs or do you use
another method altogether.

We use a dedicated IPv4 /24 for all core links which is heavily ACLed at all
external borders.

What we're currently not so good at is "protect the PE-CE link" - the
customer infrastructure is so heterogeneous that we can't do "every PE-CE
link gets a /30 from a well-known /22 (or whatever) and that is also
strongly filtered" (as ytti suggested).

gert
--
USENET is *not* the non-clickable part of WWW!
 
//www.muc.de/~gert/
Gert Doering - Munich, Germany
gert at greenie.muc.de
fax: +49-89-35655025
gert at net.informatik.tu-muenchen.de