[j-nsp] Using SRX's for BGP and Firewalling

Julien Goodwin jgoodwin at studio442.com.au
Tue Nov 9 05:34:37 EST 2010


On 09/11/10 20:12, Keegan Holley wrote:
> 
> On Mon, Nov 8, 2010 at 10:26 PM, Julien Goodwin
> <jgoodwin at studio442.com.au <mailto:jgoodwin at studio442.com.au>> wrote:
> 
>     On 09/11/10 14:17, Keegan Holley wrote:
>     >     BGP full feed on an SRX650 is fine, if you disable flow mode
>     (as much as
>     >     you can, don't forget the ALG's).
>     >
>     >
>     > What's the point of doing BGP on a firewall with firewallling
>     turned off?
> 
>     Because they're cheaper then the J-series.
> 
> 
> Why bother with either if you're all ethernet? 
> 

Because an SRX650, after discounts, is cheaper, and more robust then a
PC based (ie, standard rack pc, not a special one) router.

Especially once you add support, and don't forget that many carriers
want a DC PSU option, even if they don't use it.

-- 
Julien Goodwin
Studio442
"Blue Sky Solutioneering"

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/pipermail/juniper-nsp/attachments/20101109/1fdb184d/attachment.bin>


More information about the juniper-nsp mailing list