[j-nsp] SNMP on logical-system fxp0

[Saku Ytti]

On (2013-04-25 12:56 -0400), Brandon Ross wrote:

> I guess I'm just the lucky one that gets routers that freak out due
> to a bug (not necessarily just Juniper, but in general) or attack or

Yes it does happen. And yes it can break host OS completely, so that your
fpx0 does not nothing. At least on RS232 you can send break.

So I'm not saying you don't need OOB.

I'm saying you need on-band + OOB, but the OOB needs to be robust, port
which works as often as possible, which on-band (fate-sharing same memory,
cpu, host OS) fxp0 is not.
You don't need _three_ ports, on-band, oob and something-in-between.

-- 
  ++ytti