Hi, On Wed, Mar 24, 2010 at 08:39:27AM +0000, Dobbins, Roland wrote: > On Mar 24, 2010, at 2:55 PM, Saku Ytti wrote: > > > There is no way to make IOS GSR undossable, > > This is incorrect. iACLs work just fine to protect GSRs, and every other > hardware-based platform.
iACLs don't work very well for routers that happen to have customer edges.
"Every time a new customer connects, and a new IP address is assigned to
an interface, update all your iACLs"?
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany [email protected]
fax: +49-89-35655025 [email protected]
pgphRZpKCnqSJ.pgp
Description: PGP signature
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
