<html dir="ltr">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Cambria}
@font-face
{font-family:Calibri}
@font-face
{font-family:Tahoma}
@font-face
{font-family:Verdana}
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif"}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif"}
span.BalloonTextChar
{font-family:"Tahoma","sans-serif"}
span.EmailStyle19
{font-family:"Tahoma","sans-serif";
color:black}
span.EmailStyle20
{font-family:"Calibri","sans-serif";
color:#1F497D}
span.EmailStyle21
{font-family:"Calibri","sans-serif";
color:black}
.MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
ol
{margin-bottom:0in}
ul
{margin-bottom:0in}
-->
</style><style type="text/css" id="owaParaStyle"></style>
</head>
<body lang="EN-US" link="blue" vlink="purple" fpstyle="1" ocsi="0">
<div style="direction: ltr;font-family: Tahoma;color: #000000;font-size: 10pt;">Hi James, Tony,
<div><br>
</div>
<div>Thanks for the input. Extremely valuable to hear the feedback that the 7201s would be reaching their limits, I had guessed this much. I suppose my hopes were that we could begin to approach these numbers, and by that stage, we'd upgrade to something like
MX5s or ASR1Ks. Unfortunately, those newer routers are pretty much entirely out of our price range right now and the goal is really to put in place some "proper" routers to replace our router-on-a-stick setup, using static routing.</div>
<div><br>
</div>
<div>Although I would agree we'll see an upward trend in our IP transit needs, I don't see us needing 10GE any time soon (except maybe for internal traffic). Right now our IP transit needs are < 100 Mbps, so while flexibility for upgrades is a desire, my goal
was mostly to put these in as a stop-gap until we can get some beefier routers.</div>
<div><br>
</div>
<div>Thanks again.<br>
<div><br>
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px">
<div style="font-family:Tahoma; font-size:13px"><font face="Tahoma" size="2">Rhys Hanrahan<br>
Chief Information Officer<br>
Nexus One Pty Ltd<br>
<br>
E: <a href="mailto:support@nexusone.com.au">support@nexusone.com.au</a><br>
P: +61 2 9191 0606<br>
W: http://www.nexusone.com.au/<br>
M: PO Box 127, Royal Exchange NSW 1225<br>
A: </font>Level 10 307 Pitt St, Sydney NSW 2000</div>
</div>
</div>
</div>
<div style="font-family: Times New Roman; color: #000000; font-size: 16px">
<hr tabindex="-1">
<div id="divRpF330432" style="direction: ltr;"><font face="Tahoma" size="2" color="#000000"><b>From:</b> James Braunegg [james.braunegg@micron21.com]<br>
<b>Sent:</b> Tuesday, 15 April 2014 2:52 PM<br>
<b>To:</b> Tony Wicks; Rhys Hanrahan<br>
<b>Cc:</b> ausnog@lists.ausnog.net<br>
<b>Subject:</b> RE: [AusNOG] Cisco 7201 vs Juniper SRX 550 for border routers<br>
</font><br>
</div>
<div></div>
<div>
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">Dear Rhys</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">The Problem with both the Cisco 7200 and SRX550 platforms these are essential software based routers with no dedicated Asics and limited capacity for expansion
and growth with 10gbit interfaces becoming more common these days I can see transit requirements increasing significantly !!</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">Buying a routing platform which is has hardware asics for the data and control plane will give you large amounts of flexibility and growth, however your LNS
requirements makes your hardware choice limited !</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">Kindest Regards</span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
<div>
<p class="MsoNormal"><b><span style="font-size:11.0pt; font-family:"Verdana","sans-serif"; color:black">James Braunegg<br>
</span></b><b><span style="font-size:8.0pt; font-family:"Verdana","sans-serif"; color:black">P:</span></b><span style="font-size:8.0pt; font-family:"Verdana","sans-serif"; color:black"> 1300 769 972 |
<b>M:</b> 0488 997 207 | <b>D:</b> (03) 9751 7616</span><span style="font-size:8.0pt; font-family:"Verdana","sans-serif"; color:black"></span></p>
<p class="MsoNormal"><b><span style="font-size:8.0pt; font-family:"Verdana","sans-serif"; color:black">E:</span></b><span style="font-size:8.0pt; font-family:"Verdana","sans-serif"; color:black">
</span><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"><a href="mailto:james.braunegg@micron21.com" target="_blank"><span style="font-size:8.0pt; font-family:"Verdana","sans-serif"; color:black">james.braunegg@micron21.com</span></a></span><span style="font-size:8.0pt; font-family:"Verdana","sans-serif"; color:black">
| <b>ABN:</b> 12 109 977 666 <br>
<b>W:</b> <a href="http://www.micron21.com/ddos-protection" target="_blank"><span style="color:black">www.micron21.com/ddos-protection</span></a>
<b>T:</b> @micron21</span></p>
<p class="MsoNormal"><span style="font-size:8.0pt; font-family:"Verdana","sans-serif"; color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:8.0pt; font-family:"Verdana","sans-serif"; color:black"><br>
<img id="_x0000_i1026" src="cid:image002.jpg@01CF58B9.F9BF1F80" alt="Description: Description: Description: Description: M21.jpg" height="39" width="250" border="0"><br>
</span><span lang="EN-AU" style="font-size:8.0pt; font-family:"Verdana","sans-serif"; color:black">This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message
you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.</span><span style="font-size:8.0pt; font-family:"Verdana","sans-serif"; color:black"></span></p>
</div>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
<div>
<div style="border:none; border-top:solid #B5C4DF 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt; font-family:"Tahoma","sans-serif""> AusNOG [mailto:ausnog-bounces@lists.ausnog.net]
<b>On Behalf Of </b>Tony Wicks<br>
<b>Sent:</b> Tuesday, April 15, 2014 2:37 PM<br>
<b>To:</b> 'Rhys Hanrahan'<br>
<b>Cc:</b> ausnog@lists.ausnog.net<br>
<b>Subject:</b> Re: [AusNOG] Cisco 7201 vs Juniper SRX 550 for border routers</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<p class="MsoNormal"><span lang="EN-NZ" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D">To be frank here, with your requirements below you need better boxes. Juniper MX5 for routing and Cisco ASR1k for BNG. If you got for the EOL
Cisco’s or lower end SRX Junipers you will just need to change them out when they run out of grunt. If you want cheap LNS then use Mikrotik CCR.</span></p>
<p class="MsoNormal"><span lang="EN-NZ" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:#1F497D"> </span></p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"">From:</span></b><span style="font-size:11.0pt; font-family:"Calibri","sans-serif""> AusNOG [<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank">mailto:ausnog-bounces@lists.ausnog.net</a>]
<b>On Behalf Of </b>Rhys Hanrahan<br>
<b>Sent:</b> Tuesday, 15 April 2014 4:21 p.m.<br>
<b>To:</b> <a href="mailto:ausnog@lists.ausnog.net" target="_blank">ausnog@lists.ausnog.net</a><br>
<b>Subject:</b> [AusNOG] Cisco 7201 vs Juniper SRX 550 for border routers</span></p>
</div>
</div>
<p class="MsoNormal"><span lang="EN-NZ"> </span></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">Hi Everyone,
</span></p>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">We are currently in the middle of upgrading some our network hardware, and was hoping that I could get some input on deciding on a pair of border
routers.</span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">Initially we were looking at the Juniper MX series for this role, but found it's a bit outside our price range (for now). In trying to keep it
all Juniper (as we'll most likely use EX-series for our core and access layers), we have been looking at the Juniper SRX 550 routers for our border. They seem like they will do the job for our needs, but are missing LNS functionality, which is something we'd
have to purchase 7201s for in the future, and so therefore I’m also looking at just buying 7201s instead.</span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">Logically to me, since the SRX is (apparently) newer hardware, it should perform better than the 7201s. My anecdotal evidence, however, suggests
otherwise, and I'm looking to confirm that in terms of real-world performance. Comparing the spec sheets between the SRX 550 and the 7201, on paper it looks like the 7201 beats out the SRX in terms of performance (mainly PPS). It also sounds like the SRXs
store multiple copies of BGP routes in memory and so where a pair of full sets of internet routes for the SRX is not possible, it's still possible on 7201s.</span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">From all that I've read and heard from various people, it seems that generally, the Juniper SRX series is not held in a high regard in terms of
reliability or performance, compared to something like the MX series (which is to be expected really). Whereas I hear a lot of good things of the 7200 series, despite the fact it's EOL, it's still being used and is a reliable range. Due to these factors, despite
it being an older router, I am leaning towards the 7201s as it seems like an all-around better choice in terms of reliability and performance.</span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">My main hesitation in going with the 7201s is that, we'll be using them for quite a lot, and I'm unsure of how quickly the performance will drop
if I start using more features. So I was hoping that someone could give some real-world input so say which would likely be the better choice. Overall right now, I’m still siding with a pair of 7201s.</span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
</div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">Here is a summary of what we'll be using the border routers for:</span></p>
</div>
<div>
<ul type="disc">
<li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">BGP (Initially only a default route, but potentially 2xfull internet routes in future. Plus IX routes.)</span></li><li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">OSPF (Up to 50 or so routes)</span></li><li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">Static NAT (up to 100K active translations)
</span></li><li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">Up to 400 Mbps IP Transit</span></li><li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">Up to around 25K ACLs (we currently firewall customer servers on the border. We're looking at moving the firewalling off to a dedicated
box like an SRX or ASA, but probably not at our current size, if possible).</span></li><li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">NAT64
</span></li><li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">IPSec (around 10 Mbps of AES256/SHA traffic).</span></li><li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">NetFlow</span></li><li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">HSRP / VRRP</span></li><li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">IPv6 Support</span></li><li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">LNS (Up to 200 sessions).</span></li><li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">MPLS PE</span></li><li class="MsoNormal" style="color:black"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"">QinQ Tunnel / QinQ Termination</span></li></ul>
<div>
<div>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">Appreciate any insights that can be given on which path to take.</span></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">Thanks!</span></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">Rhys Hanrahan</span><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">Chief Information Officer</span><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">Nexus One Pty Ltd</span><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">E: <a href="mailto:support@nexusone.com.au" target="_blank">support@nexusone.com.au</a></span><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">P: +61 2 9191 0606</span><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">W: <a href="http://www.nexusone.com.au/" target="_blank">http://www.nexusone.com.au/</a></span><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">M: PO Box 127, Royal Exchange NSW 1225</span><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black">A: Level 10, 307 Pitt Street, Sydney NSW 2000</span><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"> </span><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"></span></p>
<p class="MsoNormal"><span lang="EN-AU" style="font-size:11.0pt; font-family:"Calibri","sans-serif"; color:black"><img id="Picture_x0020_1" src="cid:image003.png@01CF58B9.F9BF1F80" alt="cid:AC695111-1B5F-45C1-B097-6093A0880284" height="47" width="302" border="0"></span><span lang="EN-AU" style="font-size:11.0pt; font-family:"Cambria","serif"; color:black"></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>