[j-nsp] good filter to protect RE

[Stefan Fouant]

On 8/8/2011 10:01 PM, Kurt Bales wrote:
> Dont forget the Juniper Day One book on Securing the RE also has some good
> examples.
>
> http://forums.juniper.net/t5/Day-One-Books/Day-One-Book-Securing-the-Routing-Engine-on-M-MX-and-T-Series/ba-p/92276

I second the Day One Guide.  Cymru is a good starting point, but it 
hasn't been updated in ages... Doug's book is basically a modernized, 
more verbose equivalent of the Cymru re-protect filter.

By the way, for what it's worth, although the title of the book would 
lead you to believe it's only applicable towards the M, MX, and T-Series 
routers, quite the contrary, it's equally applicable towards SRX, EX, 
and J-Series as well.

Stefan Fouant
JNCIE-ER, JNCIE-M, JNCIE-SEC, JNCI
Technical Trainer, Juniper Networks
http://www.shortestpathfirst.net
http://www.twitter.com/sfouant