[c-nsp] IP Options Drop

[Dobbins, Roland]

On Apr 21, 2014, at 11:26 PM, Saku Ytti <saku at ytti.fi> wrote:

> As ACL match work, you could do it in iACL and then you're only left with own customers attacking you.

iACLs should be applied at all edges of the network, including customer aggregation edges, IDC distribution edges, et. al.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

	  Luck is the residue of opportunity and design.

		       -- John Milton