[j-nsp] MX960 with 3 RE's?

[Adam Vitkovsky]

> Jeff
> Sent: Thursday, January 14, 2016 10:47 PM
> To: Mark Tinka; Colton Conor; Tom Storey
> Cc: Juniper List
> Subject: Re: [j-nsp] MX960 with 3 RE's?
>
> Am 14.01.2016 um 06:45 schrieb Mark Tinka:
> > The 64-bit RE gives you more memory to hold more routes, but if you
> > only need 4x full BGP feeds today, the RE-S-2000 should be fine.
> > Naturally, the newer RE will provide longer-term support for later
> > Junos releases (especially with the architectural differences between
> > Junos 15 and anything else before it). But in your case, the RE-S-2000
> > should be just fine.
>
> Can you elaborate on that? Will the RE-2000 not work with JunOS 15+? We
> are actually planning to upgrade to JunOS soon because it supports NDP
> cache protection:
>
> http://www.juniper.net/documentation/en_US/junos15.1/topics/task/confi
> guration/ndp-cache-protection-configuring.html
>
>
> I know it's quite now and not recommended but in my eyes this feature is
> quite important to secure the network unless you want to assign /126 and
> alike  to your customers instead of the recommended, typical /64 and
> increase management overhead for everybody involved.
>
>
What? Now that's a colossal fail, the NDP cache exhaustion as a possible DOS vector and particular mitigation techniques are known for years now.
Junos won't stop surprising me.


adam



        Adam Vitkovsky
        IP Engineer

T:      0333 006 5936
E:      Adam.Vitkovsky at gamma.co.uk
W:      www.gamma.co.uk

This is an email from Gamma Telecom Ltd, trading as “Gamma”. The contents of this email are confidential to the ordinary user of the email address to which it was addressed. This email is not intended to create any legal relationship. No one else may place any reliance upon it, or copy or forward all or any of it in any form (unless otherwise notified). If you receive this email in error, please accept our apologies, we would be obliged if you would telephone our postmaster on +44 (0) 808 178 9652 or email postmaster at gamma.co.uk

Gamma Telecom Limited, a company incorporated in England and Wales, with limited liability, with registered number 04340834, and whose registered office is at 5 Fleet Place London EC4M 7RD and whose principal place of business is at Kings House, Kings Road West, Newbury, Berkshire, RG14 5BY.