Subject: Re: [OPSEC] Comments on draft-jdurand-bgp-security-02

From: "Jerome Durand (jerduran)" <[email-masked]>
Date: Mon, 1 Oct 2012 12:46:11 +0000

Also, are you aware that some networks inject the IXP
LAN into their IGP for the purposes of TE? (I.e leaving
the IXP LAN next hop present in their iBGP and then
doing MPLS TE on this LAN as opposed to next-hop-self
on the border where all peering networks are collapsed
into a single loopback)

Yeah, I did.  At some point.

Hi all,

I did too for managing my 2 exits to a single IXP. This had rgeat advantages: simple and best for convergence with Cisco BGP PIC.
However I had big problems few times when PE redistributed the LAN prefix while there was no connectivity due to broken switch fabric on Brocade MLX of the IXP. (Note I was managing also the IXP so no excuse! :-) … So I decided to change this for next-hop-self :-)
SHOULD works for me then :-)

Cheers,

Jerome

Maybe we need to add a bit more language to the point of "if you
need to deviate from these recommendations, understand why you are
doing this, and then feel free to do so" (= "SHOULD" normative
language).

Gert Doering
       -- NetMaster
--
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: +49 (89) 32356-444            USt-IdNr.: DE813185279
_______________________________________________
OPSEC mailing list
[email-masked]<mailto:[email-masked]>
https://www.ietf.org/mailman/listinfo/opsec

Jérôme Durand
Consulting Systems Engineer
Routing & Switching

[email-masked]<mailto:[email-masked]>
Mobile :+33 6 35 11 60 50

http://reseauxblog.cisco.fr

http://ipv6blog.cisco.fr

Cisco France
11, rue Camille Desmoulins
92782 Issy les Moulineaux
Cedex 9
France
www.cisco.fr<http://www.cisco.fr>

 Think before you print.
This e-mail may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply e-mail and delete all copies of this message.
For corporate legal information go to:
http://www.cisco.com/web/about/doing_business/legal/cri/index.html