[j-nsp] large subnet/no memory

Phil Shafer phil at juniper.net
Mon Feb 11 14:39:49 EST 2013


The Drifter writes:
>Sounds great. Now need to get a buy-in from  the ops folks :)
>How would you weigh the effectiveness of using your suggestion versus Cristian's? 

The prefix-limit statement is much simpler and more efficient for
the specific case that it is targeting.  In contrast, commit scripts
allow a broader range of tests and abilities, but require more work
(writing the script, deploying it, configuring it).  If you see
this as being an isolated instance, the prefix-limit will be the
simpler solution.   If you see yourself defining a larger set of
rules that all configurations should follow (sanity checks,
co-constraints, mandatory statements, derived configuration, etc),
then this may be your first step toward commit scripts.

Thanks,
 Phil


More information about the juniper-nsp mailing list