Re: [c-nsp] BGP MD5 DDOS ?

2012-09-16 Thread Robert E. Seastrom
Dobbins, Roland rdobb...@arbor.net writes: On Sep 15, 2012, at 7:58 PM, Nick Hilliard wrote: The general advice is still to use copp or acls to deprioritise unknown bgp traffic. Gtsm can help in some situations, particularly at Ixps. Otherwise md5 is a matter of choice. Some people like

Re: [c-nsp] Any experience with DMVPN on ASR1K?

2012-09-16 Thread N. Max Pierson
As Edward points out, the ASK1k has pretty much taken the 7200's former swiss army knife of routers title away IMHO. We use it for ~600 - 700 DMVPN's running EIGRP at the moment. It handles that with no sweat. Highly recommended solution for DMVPN deployment (and probably 1000 other uses as