<div>Thanks Jeff, we have 500 subs with public IP's but didnt want any access to the IP's from the Internet, we also didn't have any spare firewall so I suggested we nat the subs as they left the Redback which would make the public sub IP's unreachable. The powers that be were worried of a large CPU hit, I was never in any doubt but it is nice to here of other peoples experiences. The spam tracing siuation would not affect us as the majority of our connected hosts are pbx's.</div>
<div> </div>
<div>Thanks</div>
<div>Rick<br><br></div>
<div class="gmail_quote">On 21 January 2011 20:51, Jeff Crowe <span dir="ltr"><<a href="mailto:jeff@wtccommunications.ca" target="_blank">jeff@wtccommunications.ca</a>></span> wrote:<br>
<blockquote style="BORDER-LEFT: #ccc 1px solid; MARGIN: 0px 0px 0px 0.8ex; PADDING-LEFT: 1ex" class="gmail_quote">
<div lang="EN-US" vlink="purple" link="blue">
<div>
<p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 11pt">Hi Rick,</span></p>
<p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 11pt"> </span></p>
<p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 11pt">We had about 500 Subs NAT’d on our SE400 for a while and didn’t notice any significant impact. We also terminated > 1000 PPPoE subs inside L2TP and another 400 or so subs on straight PPPoE all on the same box.</span></p>
<p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 11pt"> </span></p>
<p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 11pt">We did away from the NAT as fast as possible though and converted the sub’s to PPPoE for ease of management. If any particular sub spammed or caused issues it was very difficult to track them down to deal with the virus/violation of policy. With PPPoE we can easily identify them as they use publically routable IP addresses.</span></p>
<p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 11pt"> </span></p>
<p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 11pt">Cheers</span></p>
<p class="MsoNormal"><span style="COLOR: #1f497d; FONT-SIZE: 11pt"> </span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: Consolas; COLOR: #1f497d; FONT-SIZE: 10.5pt">Jeff Crowe</span></p>
<p class="MsoNormal"><span style="FONT-FAMILY: Consolas; COLOR: #1f497d; FONT-SIZE: 10.5pt"> </span></p>
<div style="BORDER-BOTTOM: medium none; BORDER-LEFT: blue 1.5pt solid; PADDING-BOTTOM: 0in; PADDING-LEFT: 4pt; PADDING-RIGHT: 0in; BORDER-TOP: medium none; BORDER-RIGHT: medium none; PADDING-TOP: 0in">
<div>
<div style="BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<p class="MsoNormal"><b><span style="FONT-SIZE: 10pt"> </span></b></p>
<p class="MsoNormal"><b><span style="FONT-SIZE: 10pt">From:</span></b><span style="FONT-SIZE: 10pt"> <a href="mailto:redback-nsp-bounces@puck.nether.net" target="_blank">redback-nsp-bounces@puck.nether.net</a> [mailto:<a href="mailto:redback-nsp-bounces@puck.nether.net" target="_blank">redback-nsp-bounces@puck.nether.net</a>] <b>On Behalf Of </b>Richard Clayton<br>
<b>Sent:</b> Friday, January 21, 2011 12:31 PM<br><b>To:</b> <a href="mailto:redback-nsp@puck.nether.net" target="_blank">redback-nsp@puck.nether.net</a><br><b>Subject:</b> [rbak-nsp] Nat subscribers on SE400 from context to Internet</span></p>
</div></div>
<div>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal">I suggested a solution where all dsl users terminating in a context could be nat'd on the Redback SE400 as they exited the interface towards the Internet, concerns were raised as to whether using this feature could cause problems i.e. high cpu, the user base is around 500 but could scale up to 1000 over the next couple of years, is nat'ing subscribers in this way a valid solution or could it cause issues?</p>
</div>
<div>
<p class="MsoNormal"> </p></div>
<div>
<p class="MsoNormal">Thanks</p></div>
<div>
<p class="MsoNormal">Rick</p></div></div></div></div></div><br>_______________________________________________<br>redback-nsp mailing list<br><a href="mailto:redback-nsp@puck.nether.net" target="_blank">redback-nsp@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/redback-nsp" target="_blank">https://puck.nether.net/mailman/listinfo/redback-nsp</a><br><br></blockquote></div><br>