<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Possibly have a look at the OpenStack Quantum Network Controller- <a href="https://wiki.openstack.org/wiki/Quantum">https://wiki.openstack.org/wiki/Quantum</a><br><div><div><br></div><div>This would imply a 3 tiered solution:-</div><div>1. Front End/API/GUI</div><div>2. Orchestration - Quantum</div><div>3. Network Implementation - controlled by Quantum plugins but could be anything from virtual network appliances to physical equipment</div><div><br></div><div><br></div><div>On 28/04/2013, at 10:59 AM, Skeeve Stevens <<a href="mailto:skeeve+ausnog@eintellegonetworks.com">skeeve+ausnog@eintellegonetworks.com</a>> wrote:</div><br class="Apple-interchange-newline"><div dir="ltr">David,<div><br></div><div>I'm not saying it can't be done, but it would be a tailored solutions. We've built a few similar things in the past which have a web interface which allow for self management. These have normally involved MDU buildings and such environments - quite simple and passive locations.</div>
<div><br></div><div style="">Writing this sort of thing using the Junos API would be awesome.</div><div style=""><br></div><div style=""><br></div></div><div class="gmail_extra"><br clear="all"><div><div><br>...Skeeve</div><div><br>
</div><div><div><b style="font-size:13px;font-family:Calibri">Skeeve Stevens - </b><span style="font-size:13px;font-family:Calibri">eintellego Networks Pty Ltd</span></div><div><div><span style="font-family:Calibri;font-size:13px"><a href="mailto:skeeve@eintellegonetworks.com" target="_blank">skeeve@eintellegonetworks.com</a> ; <a href="http://www.eintellegonetworks.com/" target="_blank">www.eintellegonetworks.com</a></span><font><div style="font-family: Calibri; font-size: 13px; margin: 0px; ">
Phone: 1300 239 038; Cell +61 (0)414 753 383 ; <a>skype://skeeve</a></div><div style="font-family: Calibri; font-size: 13px; margin: 0px; "><a href="http://facebook.com/eintellegonetworks" target="_blank">facebook.com/eintellegonetworks</a> ; <a href="http://twitter.com/networkceoau" target="_blank"></a><a href="http://linkedin.com/in/skeeve" target="_blank">linkedin.com/in/skeeve</a> </div><div style="font-family: Calibri; font-size: 13px; margin: 0px; "><a href="http://twitter.com/networkceoau" target="_blank">twitter.com/networkceoau</a> ; blog: <a href="http://www.network-ceo.net/" target="_blank">www.network-ceo.net</a></div><div style="font-family: Calibri; font-size: 13px; margin: 0px; "><img src="http://eintellegonetworks.com/logos/ein09.png"><br></div><div style="margin: 0px; "><span style="color:rgb(127,0,127);font-family:Calibri,sans-serif;font-size:13px">The Experts Who The Experts Call</span></div>
</font></div><div style="font-family:Calibri,sans-serif;font-size:14px;color:rgb(127,0,127)"><span style="color:rgb(0,32,96);font-size:13px">Juniper - Cisco </span><span style="color:rgb(0,32,96);font-size:13px">- Cloud</span></div>
</div></div></div>
<br><br><div class="gmail_quote">On Sun, Apr 28, 2013 at 10:49 AM, David George <span dir="ltr"><<a href="mailto:davidg@oztix.com.au" target="_blank">davidg@oztix.com.au</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-AU" link="blue" vlink="purple">
<div><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I know, it’s a bit of a funny requirement… I’m just looking at the exercise at the moment and am under the impression that there must be a better way than how
it’s currently build.<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">The thing here is to give the customer the ability to manage *<b>some</b>* of their own stuff via a “user friendly” ui (sorry, mustn’t have been clear on that
one, definitely not for the network operators).<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">After reading my own post… I’m starting to think the best way to go about this is to put something together that can batch some config changes to whatever will
do the vrf, at least then it’ll be done properly on that device, and if the only lines being added are scoped to their wan ip and their vrf, even if the “user friendly” ui isn’t awesome, it won’t affect the performance and stability of the network, similar
to how some cloud providers do it with ACE. <u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p><p class="MsoNormal"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> <a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a> [mailto:<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">ausnog-bounces@lists.ausnog.net</a>]
<b>On Behalf Of </b>Skeeve Stevens<br>
<b>Sent:</b> Sunday, 28 April 2013 10:39 AM<br>
<b>To:</b> <<a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a>><br>
<b>Subject:</b> [AusNOG] Fwd: multi customer self manageable virtual router<u></u><u></u></span></p><p class="MsoNormal"><u></u> <u></u></p>
<div><p class="MsoNormal">George,<u></u><u></u></p>
<div><p class="MsoNormal"><u></u> <u></u></p>
<div>
<div><p class="MsoNormal">I don't think what you want exists. And a friendly Web UI? Really?<u></u><u></u></p>
<div><p class="MsoNormal"><u></u> <u></u></p>
</div>
<div><p class="MsoNormal">If there is something, it probably wont be very enterprise grade.<u></u><u></u></p>
</div>
<div><p class="MsoNormal"><u></u> <u></u></p>
</div>
<div><p class="MsoNormal">Cisco and Juniper both do the whole VRF thing very well, but not so scalable on the NAT side... ASR1K or MX5 to start. Maybe with a SRX for the NAT side.<u></u><u></u></p>
</div>
<div><p class="MsoNormal"><u></u> <u></u></p>
</div>
<div><p class="MsoNormal">They all have web interfaces... but really?<u></u><u></u></p>
</div>
</div>
<div><p class="MsoNormal"><br clear="all">
<u></u><u></u></p>
<div>
<div><p class="MsoNormal"><br>
...Skeeve<u></u><u></u></p>
</div>
<div><p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<div><p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Calibri","sans-serif"">Skeeve Stevens - </span></b><span style="font-size:10.0pt;font-family:"Calibri","sans-serif"">eintellego Networks Pty Ltd</span><u></u><u></u></p>
</div>
<div>
<div><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif""><a href="mailto:skeeve@eintellegonetworks.com" target="_blank">skeeve@eintellegonetworks.com</a> ; <a href="http://www.eintellegonetworks.com/" target="_blank">www.eintellegonetworks.com</a></span><u></u><u></u></p><div style="margin: 0cm 0cm 0.0001pt; "><span style="font-size:10.0pt;font-family:"Calibri","sans-serif"">Phone: 1300 239 038; Cell +61 (0)414 753 383 ; <a href="skype://skeeve">skype://skeeve</a><u></u><u></u></span></div><div style="margin: 0cm 0cm 0.0001pt; "><span style="font-size:10.0pt;font-family:"Calibri","sans-serif""><a href="http://facebook.com/eintellegonetworks" target="_blank">facebook.com/eintellegonetworks</a> ; <a href="http://linkedin.com/in/skeeve" target="_blank">linkedin.com/in/skeeve</a> <u></u><u></u></span></div><div style="margin: 0cm 0cm 0.0001pt; "><span style="font-size:10.0pt;font-family:"Calibri","sans-serif""><a href="http://twitter.com/networkceoau" target="_blank">twitter.com/networkceoau</a> ; blog: <a href="http://www.network-ceo.net/" target="_blank">www.network-ceo.net</a><u></u><u></u></span></div><div style="margin: 0cm 0cm 0.0001pt; "><span style="font-size:10.0pt;font-family:"Calibri","sans-serif""><img border="0" src="http://eintellegonetworks.com/logos/ein09.png"><u></u><u></u></span></div><div style="margin: 0cm 0cm 0.0001pt; "><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#7f007f">The Experts Who The Experts Call</span><u></u><u></u></div>
</div>
<div><p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060">Juniper - Cisco - Cloud</span><span style="font-size:10.5pt;font-family:"Calibri","sans-serif";color:#7f007f"><u></u><u></u></span></p>
</div>
</div>
</div>
</div><p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p>
<div><p class="MsoNormal">On Sun, Apr 28, 2013 at 10:31 AM, David George <<a href="mailto:davidg@oztix.com.au" target="_blank">davidg@oztix.com.au</a>> wrote:<u></u><u></u></p>
<div>
<div><p class="MsoNormal">Morning all,<u></u><u></u></p><p class="MsoNormal"> Does anyone know if a product exists that can allow me to act as a gateway for a bunch of different private l3/l2 networks with overlapping ips… so it’ll have to
understand multiple route tables or vrf at some level (still need each customer isolated, although each customer can have multiple sites)… and give the customers the ability to manage their own ipsec tunnels, port forwards and anything else they’re likely
to want via a friendly web ui ? The alternative is running up one vm per customer of one of the many good all-in-one router distros.. Currently each customer is handed off via a dot1q vlan.
<u></u><u></u></p><p class="MsoNormal"> Or am I looking at this the wrong way, and should I move all of this onto some decent cisco kit and work on finding a friendly web ui that can manage rules relevant
to the client on that device? <u></u><u></u></p><p class="MsoNormal"> <u></u><u></u></p><p class="MsoNormal">Thanks in advance<u></u><u></u></p><p class="MsoNormal">-dave.<u></u><u></u></p>
</div>
</div><p class="MsoNormal" style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><u></u><u></u></p>
</div><p class="MsoNormal"><u></u> <u></u></p>
</div>
</div><p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
</div>
</div>
</blockquote></div><br></div>
_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>http://lists.ausnog.net/mailman/listinfo/ausnog<br></div><br></body></html>