<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 153); font-size: 12px; font-family: Arial, sans-serif; ">
<div>
<div>
<div>NTT supports RTBH and active mitigation as well.</div>
<div>
<div>
<div><br>
</div>
<div>Regards</div>
<div>Ankur Puri</div>
<div>Global Wholesale Manager</div>
</div>
<div>NTT Australia Pty Ltd</div>
</div>
</div>
</div>
<div><br>
</div>
<span id="OLK_SRC_BODY_SECTION">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>James Braunegg <<a href="mailto:james.braunegg@micron21.com">james.braunegg@micron21.com</a>><br>
<span style="font-weight:bold">Date: </span>Monday, 8 July 2013 4:05 PM<br>
<span style="font-weight:bold">To: </span>Matt Perkins <<a href="mailto:matt@spectrum.com.au">matt@spectrum.com.au</a>>, "<a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>" <<a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [AusNOG] Q sonicwall and juniper<br>
</div>
<div><br>
</div>
<div xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<base href="x-msg://1403/"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:2 11 6 4 2 2 2 2 2 4;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
color:black;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";
color:black;}
span.EmailStyle22
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; ">Both Optus and Telstra support
</span><span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; ">RTBH … at least that’s what my new Telstra and Optus contract say…<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; "><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; ">Kindest Regards</span><b><span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; "><o:p></o:p></span></b></p>
<p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; "><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><b><span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Verdana, sans-serif; ">James Braunegg<br>
</span></b><b><span style="font-size: 8pt; color: rgb(31, 73, 125); font-family: Verdana, sans-serif; ">P:</span></b><span style="font-size: 8pt; color: rgb(31, 73, 125); font-family: Verdana, sans-serif; "> 1300 769 972 |
<b>M:</b> 0488 997 207 | <b>D:</b> (03) 9751 7616</span><span style="font-size: 8pt; color: rgb(31, 73, 125); font-family: Verdana, sans-serif; "><o:p></o:p></span></p>
<p class="MsoNormal"><b><span style="font-size: 8pt; color: rgb(31, 73, 125); font-family: Verdana, sans-serif; ">E:</span></b><span style="font-size: 8pt; color: rgb(31, 73, 125); font-family: Verdana, sans-serif; ">
</span><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"><a href="mailto:james.braunegg@micron21.com"><span style="font-size: 8pt; font-family: Verdana, sans-serif; ">james.braunegg@micron21.com</span></a></span><span style="font-size: 8pt; color: rgb(31, 73, 125); font-family: Verdana, sans-serif; ">
| <b>ABN:</b> 12 109 977 666 <br>
<b>W:</b> <a href="http://www.micron21.com/ip-transit">www.micron21.com/ip-transit</a> <b>T:</b> @micron21</span><span style="font-size: 8pt; color: rgb(31, 73, 125); font-family: Verdana, sans-serif; "><o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size: 8pt; color: rgb(31, 73, 125); font-family: Verdana, sans-serif; "><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size: 8pt; color: rgb(31, 73, 125); font-family: Verdana, sans-serif; "><br>
<img border="0" width="250" height="39" id="Picture_x0020_1" src="cid:image001.jpg@01CE7BF4.FEC393F0" alt="Description: Description: Description: Description: M21.jpg"><br>
</span><span lang="EN-AU" style="font-size: 8pt; color: rgb(31, 73, 125); font-family: Verdana, sans-serif; ">This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient
of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.</span><span style="font-size: 8pt; color: rgb(31, 73, 125); font-family: Verdana, sans-serif; "><o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; "><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size: 10pt; color: windowtext; font-family: Tahoma, sans-serif; ">From:</span></b><span style="font-size: 10pt; color: windowtext; font-family: Tahoma, sans-serif; "> AusNOG [<a href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>]
<b>On Behalf Of </b>Matt Perkins<br>
<b>Sent:</b> Monday, July 08, 2013 3:55 PM<br>
<b>To:</b> <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br>
<b>Subject:</b> Re: [AusNOG] Q sonicwall and juniper<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">An update on bgp blackwholeing. I asked some transits recently this exact question. Here's a summary of there responses.
<br>
<br>
Telstra: We are considering it. Do you want to buy our arbor package. <br>
Optus: Good idea we will consider it. Do you want to buy our arbor <br>
Vocus: Do it and you can buy our arbor package. <br>
Pipe & Pipe IX. Do it and i have tested. <br>
AAPT: Confusion followed by a no. <br>
<br>
<br>
Matt.<br>
<br>
<br>
<br>
On 8/07/13 3:45 PM, Craig Askings wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<p class="MsoNormal">I'm not aware of any, but you do have companies like Vocus. Who do accept blackhole bgp communities and have Arbor kit within their own network that will pickup on attacks.
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I've personally seen it detect and suppress attacks on my previous employer's transit connection with Vocus in the 5-10 minute range from the start of the attack.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">The most effect way of avoiding DDoS attacks in Australia is to not have Game Servers, IRC servers or gambling operations hosted on your network.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Craig.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div>
<p class="MsoNormal">On 08/07/2013, at 3:40 PM, Jonathan Thorpe <<a href="mailto:jthorpe@Conexim.com.au">jthorpe@Conexim.com.au</a>> wrote:<o:p></o:p></p>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; ">Probably a good time to ask – who supports FlowSpec advertisements?</span><span lang="EN-AU"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size: 11pt; color: rgb(31, 73, 125); font-family: Calibri, sans-serif; "> </span><span lang="EN-AU"><o:p></o:p></span></p>
</div>
<div>
<div style="border:none;border-top:solid windowtext 1.0pt;padding:3.0pt 0in 0in 0in;border-top-color:rgb(181,
196, 223)">
<div>
<p class="MsoNormal"><b><span style="font-size: 10pt; font-family: Tahoma, sans-serif; ">From:</span></b><span class="apple-converted-space"><span style="font-size: 10pt; font-family: Tahoma, sans-serif; "> </span></span><span style="font-size: 10pt; font-family: Tahoma, sans-serif; ">AusNOG
[<a href="mailto:ausnog">mailto:ausnog</a>-<a href="mailto:bounces@lists.ausnog.net"><span style="color:purple">bounces@lists.ausnog.net</span></a>]<span class="apple-converted-space"> </span><b>On Behalf Of<span class="apple-converted-space"> </span></b>Craig
Askings<br>
<b>Sent:</b><span class="apple-converted-space"> </span>Monday, 8 July 2013 3:33 PM<br>
<b>To:</b><span class="apple-converted-space"> </span>Zone Networks - Joel Nath<br>
<b>Cc:</b><span class="apple-converted-space"> </span><a href="mailto:ausnog@lists.ausnog.net"><span style="color:purple">ausnog@lists.ausnog.net</span></a><br>
<b>Subject:</b><span class="apple-converted-space"> </span>Re: [AusNOG] Q sonicwall and juniper</span><span lang="EN-AU"><o:p></o:p></span></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU">Agreed, if you want to manage DDoS attacks you really want:<o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-AU">1) Juniper MX out front with BGP flowspec enabled on it. <o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-AU">2) Some tool to identify said DDoS and generate the flowspec rule to match it. (Arbor?)<o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-AU">3) Upstream providers who can automatically sink said traffic at their borders.<o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-AU"><a href="http://www.slideshare.net/sfouant/an-introduction-to-bgp-flow-spec"><span style="color:purple">http://www.slideshare.net/sfouant/an-introduction-to-bgp-flow-spec</span></a><o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
<div>
<div>
<div>
<p class="MsoNormal"><span lang="EN-AU">On 08/07/2013, at 3:27 PM, "Zone Networks - Joel Nath" <<a href="mailto:joel@zonenetworks.com.au"><span style="color:purple">joel@zonenetworks.com.au</span></a>> wrote:<o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU"><br>
<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU">Firewall wont help protect you against DDOS, especially anything that is software based<br>
<br>
Srx 3400 + might help abit as its ASIC but a decent SYN flood will take it out as well.<br>
<br>
Regards<br>
Joel<br>
<br>
-----Original Message-----<br>
From: AusNOG [<a href="mailto:ausnog">mailto:ausnog</a>-<a href="mailto:bounces@lists.ausnog.net"><span style="color:purple">bounces@lists.ausnog.net</span></a>] On Behalf Of Alex Samad - Yieldbroker<br>
Sent: Monday, 8 July 2013 3:19 PM<br>
To:<span class="apple-converted-space"> </span><a href="mailto:ausnog@lists.ausnog.net"><span style="color:purple">ausnog@lists.ausnog.net</span></a><br>
Subject: Re: [AusNOG] Q sonicwall and juniper<br>
<br>
Hi<br>
<br>
Thanks to everyone that has given me feedback, definitely seems like juniper is the router of choice.<br>
This is still early days for me... more of a fact finding mission<br>
<br>
One of the design choices I am looking at.<span class="apple-converted-space"> </span><br>
<br>
It seems like there are units capable of looking after (in 1 HA setup) both Internet FW and internet FW.<br>
<br>
Currently I am using some cisco 2600's for my ext routers ... ie WAN ... BGP and basic ACL's<br>
<br>
The original idea was to replicate this, so outside routers, Internet FW and internal FW with similar setup<br>
<br>
The main reason for that is that a DDOS or any attack via BGP can only attack our outside routers. Thus reducing our foot print our external FW is exposed to the outside world.<br>
<br>
More background, we provide our product via the internet and via private connections (leased lines of sorts, premium service ).<br>
<br>
What we are trying to avoid with separate devices is internet issues affecting premium services. And to some extend our internal traffic.<br>
<br>
So I have thrown my eye over at the srx 550 and find it (and it seems other models / manufactures) provide virtual routers/domains Is this enough to protect a FW device.<br>
<br>
So if I replace my external routers and internet FW and internet FW, with a SRX550 am I leaving myself open to the cpu of the device being taken up with BGP process or DDOS from the internet ... etc etc.<br>
<br>
<br>
Thanks<br>
Alex<br>
<br>
<br>
<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU">-----Original Message-----<br>
From: AusNOG [<a href="mailto:ausnog">mailto:ausnog</a>-<a href="mailto:bounces@lists.ausnog.net"><span style="color:purple">bounces@lists.ausnog.net</span></a>] On Behalf Of<span class="apple-converted-space"> </span><br>
Andrew Jones<br>
Sent: Monday, 8 July 2013 2:47 PM<br>
To:<span class="apple-converted-space"> </span><a href="mailto:ausnog@lists.ausnog.net"><span style="color:purple">ausnog@lists.ausnog.net</span></a><br>
Subject: Re: [AusNOG] Q sonicwall and juniper<br>
<br>
I have quite a few SRX clusters running, and find them very reliable<span class="apple-converted-space"> </span><br>
in general. Most of the issues which were there earlier have been sorted out.<br>
"Commit rollback", which used not to be available in earlier versions<span class="apple-converted-space"> </span><br>
of junos when clustering was enabled now works as well, which is a big<span class="apple-converted-space"> </span><br>
plus in my book.<br>
<br>
<br>
<br>
On 08.07.2013 14:30, Ryan Finnesey wrote:<br>
<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU">Lol never worked with clustering.<br>
<br>
Sent from my iPad<br>
<br>
On Jul 7, 2013, at 9:52 PM, "Skeeve Stevens"<br>
<<a href="mailto:skeeve+ausnog@eintellegonetworks.com"><span style="color:purple">skeeve+ausnog@eintellegonetworks.com</span></a>> wrote:<br>
<br>
<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU">+1.<br>
<br>
Juniper clustering was developed, coded, and not tested by Satan<span class="apple-converted-space"> </span><br>
himself.<br>
<br>
...Skeeve<br>
<br>
SKEEVE STEVENS - eintellego Networks Pty Ltd<br>
<br>
<a href="mailto:skeeve@eintellegonetworks.com"><span style="color:purple">skeeve@eintellegonetworks.com</span></a><span class="apple-converted-space"> </span>;<span class="apple-converted-space"> </span><a href="http://www.eintellegonetworks.com"><span style="color:purple">www.eintellegonetworks.com</span></a><span class="apple-converted-space"> </span>[3]<br>
<br>
Phone: 1300 239 038; Cell +61 (0)414 753 383 ;<span class="apple-converted-space"> </span><a href="skype://skeeve"><span style="color:purple">skype://skeeve</span></a><br>
<br>
<a href="http://facebook.com/eintellegonetworks"><span style="color:purple">facebook.com/eintellegonetworks</span></a><span class="apple-converted-space"> </span>[4] ; [5]<a href="http://linkedin.com/in/skeeve"><span style="color:purple">linkedin.com/in/skeeve</span></a><span class="apple-converted-space"> </span>[6]<br>
<br>
<a href="http://twitter.com/networkceoau"><span style="color:purple">twitter.com/networkceoau</span></a><span class="apple-converted-space"> </span>[5] ; blog:<span class="apple-converted-space"> </span><a href="http://www.network-ceo.net"><span style="color:purple">www.network-ceo.net</span></a><span class="apple-converted-space"> </span>[7]<br>
<br>
The Experts Who The Experts Call<br>
Juniper - Cisco - Cloud<br>
<br>
On Mon, Jul 8, 2013 at 11:47 AM, James Braunegg<span class="apple-converted-space"> </span><br>
<<a href="mailto:james.braunegg@micron21.com"><span style="color:purple">james.braunegg@micron21.com</span></a>> wrote:<br>
<br>
<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU">I like the Juniper SRX 3400 / SRX 5600 firewalls the nice things<span class="apple-converted-space"> </span><br>
about these is you can run per device redundant routing engines,<span class="apple-converted-space"> </span><br>
both of these support hardware line rate 10gbit ports and are full<span class="apple-converted-space"> </span><br>
ASIC based.<br>
<br>
If you don't actually need 10gbit throughput you could look at the<span class="apple-converted-space"> </span><br>
SRX 650 which can support 10gbit ports but all processing is done<span class="apple-converted-space"> </span><br>
in software not in ASIC<br>
<br>
Juniper had some issues with clustering the SRX in the early days<span class="apple-converted-space"> </span><br>
but these seem to be all but gone now...<br>
<br>
That being said I still avoid clustering where possible and much<span class="apple-converted-space"> </span><br>
prefer two single devices not linked in anyway other than standard<span class="apple-converted-space"> </span><br>
routing protocols.<br>
<br>
Juniper also has a fantastic CLI … one of the best I've ever used.<br>
<br>
Do you have a budget in mind ?<br>
<br>
Kindest Regards<br>
<br>
James Braunegg<br>
P: 1300 769 972 | M: 0488 997 207 | D: (03) 9751 7616<br>
<br>
E:<span class="apple-converted-space"> </span><a href="mailto:james.braunegg@micron21.com"><span style="color:purple">james.braunegg@micron21.com</span></a><span class="apple-converted-space"> </span>| ABN: 12 109 977 666<br>
W:<span class="apple-converted-space"> </span><a href="http://www.micron21.com/ip-transit"><span style="color:purple">www.micron21.com/ip-transit</span></a><span class="apple-converted-space"> </span>[1] T: @micron21<br>
<br>
<image001.jpg><br>
This message is intended for the addressee named above. It may<span class="apple-converted-space"> </span><br>
contain privileged or confidential information. If you are not the<span class="apple-converted-space"> </span><br>
intended recipient of this message you must not use, copy,<span class="apple-converted-space"> </span><br>
distribute or disclose it to anyone other than the addressee. If<span class="apple-converted-space"> </span><br>
you have received this message in error please return the message<span class="apple-converted-space"> </span><br>
to the sender by replying to it and then delete the message from<span class="apple-converted-space"> </span><br>
your computer.<br>
<br>
-----Original Message-----<br>
From: AusNOG [<a href="mailto:ausnog">mailto:ausnog</a>-<a href="mailto:bounces@lists.ausnog.net"><span style="color:purple">bounces@lists.ausnog.net</span></a>] On Behalf Of<span class="apple-converted-space"> </span><br>
Alex Samad - Yieldbroker<br>
Sent: Monday, July 08, 2013 10:01 AM<br>
To:<span class="apple-converted-space"> </span><a href="mailto:ausnog@lists.ausnog.net"><span style="color:purple">ausnog@lists.ausnog.net</span></a><br>
Subject: [AusNOG] Q sonicwall and juniper<br>
<br>
Hi<br>
<br>
Was wondering what the groups thoughts where on sonicwall and<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU">maybe<br>
<br>
<br>
<o:p></o:p></span></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal"><span lang="EN-AU">in relation to juniper.<br>
<br>
Most of my experience has been with Cisco and linux (firewalls)<br>
<br>
In particular I am looking at<br>
<br>
Exterior FW (facing internet)<br>
<br>
Or<br>
<br>
Interior FW (not facing Internet)<br>
<br>
Like to have a cluster (HA setup)<br>
<br>
Like to have min 2 x 10G fibre ports per dev and some 1G ports<br>
<br>
Don't need any sort of deep packet inspection<br>
<br>
I prefer CLI, my initial googling seems to suggest sonic is not<span class="apple-converted-space"> </span><br>
very cli friendly at all<br>
<br>
Again my initial investigation leads me to NSA 5600 (or NSA 6600),<span class="apple-converted-space"> </span><br>
not sure what the comparably Juniper might be.<br>
<br>
Thanks<br>
<br>
Alex<br>
<br>
_______________________________________________<br>
<br>
AusNOG mailing list<br>
<br>
<a href="mailto:AusNOG@lists.ausnog.net"><span style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
<br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog"><span style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><span class="apple-converted-space"> </span>[2]<span class="apple-converted-space"> </span><br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net"><span style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog"><span style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><span class="apple-converted-space"> </span>[2]<o:p></o:p></span></p>
</div>
</blockquote>
</blockquote>
<div>
<p class="MsoNormal"><span lang="EN-AU"><br>
<br>
<br>
<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU">_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net"><span style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog"><span style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><span class="apple-converted-space"> </span>[2]<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU"><br>
<br>
Links:<br>
------<br>
[1]<span class="apple-converted-space"> </span><a href="http://www.micron21.com/ip-transit"><span style="color:purple">http://www.micron21.com/ip-transit</span></a><br>
[2]<span class="apple-converted-space"> </span><a href="http://lists.ausnog.net/mailman/listinfo/ausnog"><span style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><br>
[3]<span class="apple-converted-space"> </span><a href="http://www.eintellegonetworks.com/"><span style="color:purple">http://www.eintellegonetworks.com/</span></a><br>
[4]<span class="apple-converted-space"> </span><a href="http://facebook.com/eintellegonetworks"><span style="color:purple">http://facebook.com/eintellegonetworks</span></a><br>
[5]<span class="apple-converted-space"> </span><a href="http://twitter.com/networkceoau"><span style="color:purple">http://twitter.com/networkceoau</span></a><br>
[6]<span class="apple-converted-space"> </span><a href="http://linkedin.com/in/skeeve"><span style="color:purple">http://linkedin.com/in/skeeve</span></a><br>
[7]<span class="apple-converted-space"> </span><a href="http://www.network-ceo.net/"><span style="color:purple">http://www.network-ceo.net/</span></a><br>
<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net"><span style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog"><span style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU"><br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net"><span style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog"><span style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU">_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net"><span style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog"><span style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><br>
<br>
<br>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net"><span style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog"><span style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><o:p></o:p></span></p>
</div>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU"> <o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size: 13.5pt; font-family: Helvetica, sans-serif; ">_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net"><span style="color:purple">AusNOG@lists.ausnog.net</span></a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog"><span style="color:purple">http://lists.ausnog.net/mailman/listinfo/ausnog</span></a><o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><br>
<br>
<br>
<o:p></o:p></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>AusNOG mailing list<o:p></o:p></pre>
<pre><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><o:p></o:p></pre>
<pre><a href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></pre>
</blockquote>
<p class="MsoNormal"><br>
<br>
<br>
<o:p></o:p></p>
<pre>-- <o:p></o:p></pre>
<pre>/* Matt Perkins <o:p></o:p></pre>
<pre> Direct 1300 137 379 Spectrum Networks Ptd. Ltd. <o:p></o:p></pre>
<pre> Office 1300 133 299 <a href="mailto:matt@spectrum.com.au">matt@spectrum.com.au</a> <o:p></o:p></pre>
<pre> Fax 1300 133 255 Level 6, 350 George Street Sydney 2000<o:p></o:p></pre>
<pre> SIP <a href="mailto:1300137379@sip.spectrum.com.au">1300137379@sip.spectrum.com.au</a> <o:p></o:p></pre>
<pre> PGP/GNUPG Public Key can be found at <a href="http://pgp.mit.edu">http://pgp.mit.edu</a> <o:p></o:p></pre>
<pre>*/<o:p></o:p></pre>
</div>
</div>
</div>
</span>
</body>
</html>