[c-nsp] IP Options Drop

Saku Ytti saku at ytti.fi
Mon Apr 21 15:36:49 EDT 2014


On (2014-04-21 19:19 +0000), Dobbins, Roland wrote:

> This is why having a rationalized address plan is important for security purposes; also, customers should use the operator's space for p2p transit links.

And you should not advertise customer linknets, at least not PE facing side.
Reducing attack surface is simple and effective.

-- 
  ++ytti


More information about the cisco-nsp mailing list