On Thu, 10 Nov 2005, Alexander Koch wrote: > I know the changes the LINX has implemented, and I am > curious... and this might affect other folk as well. > > What is better - the LINX approach (blocking the port, > trying again in x minutes when too many MACs were seen) > or the Equinix approach (we hardcode your MAC per VLAN/ > per port if untagged, all else we just drop)?
Much of a muchness really. With the former approach, it's easier for the participants to effect changes to their IX equipment without having to ask the IX operator to clear the locking/reconfigure the static MAC. The protection against badness is pretty equal, whatever you do. Cheers, Mike
