[j-nsp] Need some advice

Johan Borch johan.borch at gmail.com
Tue Dec 7 10:27:11 EST 2010


I'm no expert on this and this list seems to have a horde of them :)

I have a quite simple setup where each customer is assigned a VRF, to that
VRF office connections, leased lines, vpn, server network etc is connected,
I run ospf inside the VRF. Usually each customer have an uplink to a central
firewall, where shared services like dns, Internet are connected. My
question is, is it ugly/wrong/../ to run BGP from customer "core" (VRF) to
the firewall and use private ASN's? My idea is to see the customer VRF as
their internal network and the firewall as an external entity.


More information about the juniper-nsp mailing list