[ixpmanager] Additional Virtual Interfaces Not Included In Auto-generated RS Configs
Kyle Spencer
kyle at stormzero.com
Tue Sep 12 17:21:44 IST 2017
Indeed. I discovered this while playing around. Thanks for the tip!
On Tue, Sep 12, 2017 at 7:20 PM, Rasmus Åberg <rasmus at sthix.net> wrote:
> You need to add the second IP address as a new VLAN interface on the first virtual interface instead of creating a new one. It’ll get you up and running for now. But as nick says this isn’t a great idea in the long run.
>
> //Rasmus
>
> On 2017-09-12, 17:34, "ixpmanager on behalf of Kyle Spencer" <ixpmanager-bounces at inex.ie on behalf of kyle at stormzero.com> wrote:
>
> Understood. We'll force them to migrate to a different architecture.
>
> On Tue, Sep 12, 2017 at 6:32 PM, Nick Hilliard <nick at foobar.org> wrote:
> > Kyle Spencer wrote:
> >> I have a peer using two IP addresses on a single physical interface.
> >
> > This is deliberately not supported. Give them two interfaces and lock
> > down the number of MAC addresses to one per interface, preferably with a
> > static layer 2 ACL. If there are issues relating to getting a
> > cross-connect to this organization, this may require you to host one of
> > their switches in your rack with local cross-connect into the IXP fabric
> > - if they do this, make sure that they've split out the vlans properly
> > and that you can only see one MAC address on each port.
> >
> > Essentially what you're doing here is extending your IXP into someone
> > else's network, which is a strategically bad move from a variety of
> > different reasons, mostly because it will shoot your network's
> > security/stability in the foot.
> >
> > This may not be the answer that's most convenient for you guys right
> > now, but it's something that we would take really seriously and have
> > burn wounds to show for it :-|
> >
> > Nick
> > _______________________________________________
> > INEX IXP Manager mailing list
> > ixpmanager at inex.ie
> > https://www.inex.ie/mailman/listinfo/ixpmanager
>
>
>
> --
> Cell/WhatsApp/Signal: +256790884905
> _______________________________________________
> INEX IXP Manager mailing list
> ixpmanager at inex.ie
> https://www.inex.ie/mailman/listinfo/ixpmanager
>
>
>
> _______________________________________________
> INEX IXP Manager mailing list
> ixpmanager at inex.ie
> https://www.inex.ie/mailman/listinfo/ixpmanager
--
Cell/WhatsApp/Signal: +256790884905
More information about the ixpmanager
mailing list