IX's partners, During last RIPE63 meeting I toke 2 actions: A/ BGP SOO extended community 0.X (AS=0) on IOS XR was not supported. à This has been fixed and integrated in recent release. B/ To see if on low end platforms we could change the default for proxy-arp: in IOS proxy-arp is on by default, this not the case for IOS-XR or NX-OS. We check with our different partners (including service-provider, enterprise and consumer customers). We can't change the default, lots of enterprise applications and consumer application need it by default. What we are looking at now: adding a CLI knob "auto-security [service-provider|enterprise|data-center]". This knob if used with service-provider argument will automatically change few default value and turn off proxy-arp. You should expect to see this features within coming releases. I'll keep you posted. BTW: Any question/issue (even if you don't own Cisco equipment) could be address at: ask-cisco-ix@cisco.com. BRGDS Bertrand Bertrand Duvivier L3VPN, BGP, ISIS, CLNS & RIB/FIB PRODUCT MANAGER Corporate Development bduvivie@cisco.com <mailto:bduvivie@cisco.com> Mobile: +32 478 68 13 36 Cisco Systems Belgium BVBA/SPRL Belgium Cisco.com <http://www.cisco.com> <image001.gif> <image002.gif>Think before you print. This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message. Cisco Systems Belgium BVBA/SPRL De Kleetlaan 6A - Pegasus Park B-1831 Diegem BTW BE 047.138.227 RPR/RPM Brussel/Bruxelles For corporate legal information go to: http://www.cisco.com/web/about/doing_business/legal/cri/index.html <http://www.cisco.com/web/about/doing_business/legal/cri/index.html> _______________________________________________ Euro-ix-tech-l mailing list Euro-ix-tech-l@euro-ix.net http://mailman.euro-ix.net/mailman/listinfo/euro-ix-tech-l Please note Euro-IX has a Mailing List Policy at: https://www.euro-ix.net/documents/886-mailinglistpolicy-txt?download=yes
Hi Bertrand, On Thu, Feb 16, 2012 at 10:04, Bertrand Duvivier (bduvivie) <bduvivie@cisco.com> wrote:
A/ BGP SOO extended community 0.X (AS=0) on IOS XR was not supported. à This has been fixed and integrated in recent release.
B/ To see if on low end platforms we could change the default for proxy-arp: in IOS proxy-arp is on by default, this not the case for IOS-XR or NX-OS.
We check with our different partners (including service-provider, enterprise and consumer customers). We can’t change the default, lots of enterprise applications and consumer application need it by default.
What we are looking at now: adding a CLI knob “auto-security [service-provider|enterprise|data-center]”.
This knob if used with service-provider argument will automatically change few default value and turn off proxy-arp.
thanks for the update. Much appreciated :-) The "auto-security" template is a good idea. If there's a way to do "show auto-security" to see the current settings like in show sdm, this would be helpful. Kind regards, Dominik
Hi Bertrand, hi Dominik, I support the auto-security idea as well. Could help to get a couple of "default values" set right on the beginning of configuration. Best regards, Florian EuroTransit GmbH global IP transit and carrier services Chief Technical Officer Alsterufer 30, D-20354 Hamburg fon: +49 40 41354058 fax: +49 40 41354893 E-Mail: florian.hibler@euro-transit.net Internet: http://www.euro-transit.net EuroTransit GmbH CEO: Andy Fischer Commercial Registry: Amtsgericht Hamburg HRB 107158 VAT Number: DE219346766 Registered Office: Hamburg, Germany Notice: This transmittal and/or attachments may be privileged or confidential. If you are not the intended recipient, you are hereby notified that you have received this transmittal in error; any review, dissemination, or copying is strictly prohibited. If you received this transmittal in error, please notify us immediately by reply and immediately delete this message and all its attachments. Thank you. On Feb 16, 2012, at 10:31 AM, Dominik Bay wrote:
Hi Bertrand,
On Thu, Feb 16, 2012 at 10:04, Bertrand Duvivier (bduvivie) <bduvivie@cisco.com> wrote:
A/ BGP SOO extended community 0.X (AS=0) on IOS XR was not supported. à This has been fixed and integrated in recent release.
B/ To see if on low end platforms we could change the default for proxy-arp: in IOS proxy-arp is on by default, this not the case for IOS-XR or NX-OS.
We check with our different partners (including service-provider, enterprise and consumer customers). We can’t change the default, lots of enterprise applications and consumer application need it by default.
What we are looking at now: adding a CLI knob “auto-security [service-provider|enterprise|data-center]”.
This knob if used with service-provider argument will automatically change few default value and turn off proxy-arp.
thanks for the update. Much appreciated :-) The "auto-security" template is a good idea. If there's a way to do "show auto-security" to see the current settings like in show sdm, this would be helpful.
Kind regards, Dominik
on 16.02.2012 11:01 Florian Hibler - EuroTransit GmbH wrote:
I support the auto-security idea as well. Could help to get a couple of "default values" set right on the beginning of configuration.
+1 Arnold -- Arnold Nipper CTO/COO e-mail: arnold.nipper@de-cix.net DE-CIX Management GmbH mobile: +49 152 5371 7690 Lichtstr. 43i, 50825 Koeln phone: +49 69 1730 902 22 Geschaeftsfuehrer Harald A. Summa fax: +49 69 4056 2716 Registergericht AG Koeln HRB 51135 http://www.de-cix.net
Hi, I agree with colleagues: a global option for Proxy ARP would be nice like: conf mode#arp proxy off Best wishes, Maxim On 16 Feb 2012, at 12:26, Arnold Nipper wrote:
on 16.02.2012 11:01 Florian Hibler - EuroTransit GmbH wrote:
I support the auto-security idea as well. Could help to get a couple of "default values" set right on the beginning of configuration.
+1
Arnold -- Arnold Nipper CTO/COO e-mail: arnold.nipper@de-cix.net DE-CIX Management GmbH mobile: +49 152 5371 7690 Lichtstr. 43i, 50825 Koeln phone: +49 69 1730 902 22 Geschaeftsfuehrer Harald A. Summa fax: +49 69 4056 2716 Registergericht AG Koeln HRB 51135 http://www.de-cix.net
participants (5)
-
Arnold Nipper -
Bertrand Duvivier (bduvivie) -
Dominik Bay -
Florian Hibler - EuroTransit GmbH -
Maxim Tuliuk