<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle19
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1423449830;
mso-list-template-ids:1224493222;}
@list l0:level1
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:36.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level2
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:72.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level3
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:108.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level4
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:144.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level5
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:180.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level6
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:216.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level7
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:252.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level8
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:288.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
@list l0:level9
{mso-level-number-format:bullet;
mso-level-text:\F0B7;
mso-level-tab-stop:324.0pt;
mso-level-number-position:left;
text-indent:-18.0pt;
mso-ansi-font-size:10.0pt;
font-family:Symbol;}
ol
{margin-bottom:0cm;}
ul
{margin-bottom:0cm;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-NZ link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'>With your budget I really think you should look at the Mikrotik range, they can do 10G easily and LNS works really well. Most Network guys are still in the “it can’t work, it’s too cheap” mindset, but really it’s better to get a really good set of Mikrotik’s than a crappy old set of name brand routers. I used them for LNS termination of dial ups 10 years ago and I know of many small ISP’s using them for everything. I’ve also has faster and better support out of them than Cisco, that’s for sure. <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><a href="http://routerboard.com/CCR1036-8G-2Splus">http://routerboard.com/CCR1036-8G-2Splus</a> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'>There is a 72core box with dual power coming out very soon.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>From:</span></b><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif"'> AusNOG [mailto:ausnog-bounces@lists.ausnog.net] <b>On Behalf Of </b>Rhys Hanrahan<br><b>Sent:</b> Tuesday, 15 April 2014 5:44 p.m.<br><b>To:</b> Skeeve Stevens<br><b>Cc:</b> ausnog@lists.ausnog.net<br><b>Subject:</b> Re: [AusNOG] Cisco 7201 vs Juniper SRX 550 for border routers<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'>Hi Skeeve, <o:p></o:p></span></p><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'>Appreciate the feedback. Would you suggest that a cluster of SRX 550s on the edge, with 7201s as dedicated LNSs could work in our situation? Would it be likely that the SRX 550 can obtain the kind of throughput (or close to) that I'm looking for?<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'>Multiple roles on our edge is hard for us to avoid since we're coming from a router on a stick setup. Bringing in a collapsed core and distribution layer is new for us. 1:1 NAT is also hard to avoid, given the difficulty of obtaining IPs - just filling out our current cage will likely more than use up the maximum /22 allocation. So it's something we've always done for customer servers, to try and conserve space as much as possible.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'>I've looked at ASR1Ks and MX5 bundles, and it's just too much of a jump in price for us right now (considering what hardware we're coming from - think Linux router). I could go for MikroTik, but rather something that can be more widely supported and with more documentation, so it's easier for our team to support.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'>Moving to something like those is definitely on the road-map, but we need an affordable border router to get us half-way there, and build up the customer base before we move all the way to MX or ASR routers.<o:p></o:p></span></p><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'><o:p> </o:p></span></p><div><div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'>Rhys Hanrahan<br>Chief Information Officer<br>Nexus One Pty Ltd<br><br>E: <a href="mailto:support@nexusone.com.au">support@nexusone.com.au</a><br>P: +61 2 9191 0606<br>W: <a href="http://www.nexusone.com.au/">http://www.nexusone.com.au/</a><br>M: PO Box 127, Royal Exchange NSW 1225<br>A: Level 10 307 Pitt St, Sydney NSW 2000<o:p></o:p></span></p></div></div></div></div><div><div class=MsoNormal align=center style='text-align:center'><span style='color:black'><hr size=3 width="100%" align=center></span></div><div id=divRpF823695><p class=MsoNormal style='margin-bottom:12.0pt'><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";color:black'> Skeeve Stevens [skeeve+ausnog@eintellegonetworks.com]<br><b>Sent:</b> Tuesday, 15 April 2014 3:13 PM<br><b>To:</b> Rhys Hanrahan<br><b>Cc:</b> <a href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br><b>Subject:</b> Re: [AusNOG] Cisco 7201 vs Juniper SRX 550 for border routers</span><span style='color:black'><o:p></o:p></span></p></div><div><div><p class=MsoNormal><span style='color:black'>Rhys, <o:p></o:p></span></p><div><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='color:black'>Firstly, the 7201's are great LNS's... the only issue is throughput (max 1Gb)<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='color:black'>The SRX500's are great - firewalls. We generally use them as such, with MX5's in front of them, but they can face the world just fine by themselves.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='color:black'>You cannot compare a 7201 and SRX550 - completely different devices for different purposes.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='color:black'>The MX5's can be LNS's (up to 4000 users), but they aren't that cheap.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='color:black'>The SRX platform is excellent, but not all models... for example, I avoid the 650's. The 550's I run in cluster in multiple locations and they seem to work great, with little or no issues and doing a multitude of tasks on the same box.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='color:black'>If you want cheap (and nasty) go the Mikrotik, but wash yourself afterwards :)<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='color:black'>You should also not be doing BGP edge and LNS on the same device... separate for a happier life.<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p></div><div><p class=MsoNormal><span style='color:black'>Regarding features of the 7201. They start at 1Gb TP with doing nothing else... but degrade quickly of you throw ACL's, QoS and rate-limiting at it, and if you want to destroy it, through PBR as well. Then it will end up as an 877 :)<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p></div><div><div><p class=MsoNormal><span style='color:black'><br clear=all><o:p></o:p></span></p><div><div><div><p class=MsoNormal><span style='color:black'><br>...Skeeve<o:p></o:p></span></p></div><div><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p></div><div><div><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'>Skeeve Stevens - </span></b><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'>eintellego Networks Pty Ltd</span><span style='color:black'><o:p></o:p></span></p></div><div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'><a href="mailto:skeeve@eintellegonetworks.com" target="_blank">skeeve@eintellegonetworks.com</a> ; <a href="http://www.eintellegonetworks.com/" target="_blank">www.eintellegonetworks.com</a></span><span style='color:black'> <o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt'><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'>Phone: 1300 239 038; Cell +61 (0)414 753 383 ; skype://skeeve<o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt'><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'><a href="http://facebook.com/eintellegonetworks" target="_blank">facebook.com/eintellegonetworks</a> ; <a href="http://linkedin.com/in/skeeve" target="_blank">linkedin.com/in/skeeve</a> <o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt'><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'><a href="http://twitter.com/theispguy" target="_blank">twitter.com/theispguy</a> ; blog: <a href="http://www.theispguy.com/" target="_blank">www.theispguy.com</a><o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt'><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:black'><o:p></o:p></span></p><p style='margin:0cm;margin-bottom:.0001pt'><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:#7F007F'>The Experts Who The Experts Call</span><span style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal><span style='font-size:10.0pt;font-family:"Calibri","sans-serif";color:#002060'>Juniper - Cisco - Cloud - Consulting - IPv4 Brokering</span><span style='font-size:10.5pt;font-family:"Calibri","sans-serif";color:#7F007F'><o:p></o:p></span></p></div></div></div></div></div><p class=MsoNormal style='margin-bottom:12.0pt'><span style='color:black'><o:p> </o:p></span></p><div><p class=MsoNormal><span style='color:black'>On Tue, Apr 15, 2014 at 2:20 PM, Rhys Hanrahan <<a href="mailto:rhys@nexusone.com.au" target="_blank">rhys@nexusone.com.au</a>> wrote:<o:p></o:p></span></p><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Hi Everyone, </span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'> </span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>We are currently in the middle of upgrading some our network hardware, and was hoping that I could get some input on deciding on a pair of border routers.</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'> </span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Initially we were looking at the Juniper MX series for this role, but found it's a bit outside our price range (for now). In trying to keep it all Juniper (as we'll most likely use EX-series for our core and access layers), we have been looking at the Juniper SRX 550 routers for our border. They seem like they will do the job for our needs, but are missing LNS functionality, which is something we'd have to purchase 7201s for in the future, and so therefore I’m also looking at just buying 7201s instead.</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'> </span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Logically to me, since the SRX is (apparently) newer hardware, it should perform better than the 7201s. My anecdotal evidence, however, suggests otherwise, and I'm looking to confirm that in terms of real-world performance. Comparing the spec sheets between the SRX 550 and the 7201, on paper it looks like the 7201 beats out the SRX in terms of performance (mainly PPS). It also sounds like the SRXs store multiple copies of BGP routes in memory and so where a pair of full sets of internet routes for the SRX is not possible, it's still possible on 7201s.</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'> </span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>From all that I've read and heard from various people, it seems that generally, the Juniper SRX series is not held in a high regard in terms of reliability or performance, compared to something like the MX series (which is to be expected really). Whereas I hear a lot of good things of the 7200 series, despite the fact it's EOL, it's still being used and is a reliable range. Due to these factors, despite it being an older router, I am leaning towards the 7201s as it seems like an all-around better choice in terms of reliability and performance.</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'> </span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>My main hesitation in going with the 7201s is that, we'll be using them for quite a lot, and I'm unsure of how quickly the performance will drop if I start using more features. So I was hoping that someone could give some real-world input so say which would likely be the better choice. Overall right now, I’m still siding with a pair of 7201s.</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'> </span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Here is a summary of what we'll be using the border routers for:</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div><div><ul type=disc><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>BGP (Initially only a default route, but potentially 2xfull internet routes in future. Plus IX routes.)</span><span lang=EN-AU> <o:p></o:p></span></li><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>OSPF (Up to 50 or so routes)</span><span lang=EN-AU> <o:p></o:p></span></li><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>Static NAT (up to 100K active translations) </span><span lang=EN-AU><o:p></o:p></span></li><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>Up to 400 Mbps IP Transit</span><span lang=EN-AU> <o:p></o:p></span></li><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>Up to around 25K ACLs (we currently firewall customer servers on the border. We're looking at moving the firewalling off to a dedicated box like an SRX or ASA, but probably not at our current size, if possible).</span><span lang=EN-AU><o:p></o:p></span></li><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>NAT64 </span><span lang=EN-AU><o:p></o:p></span></li><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>IPSec (around 10 Mbps of AES256/SHA traffic).</span><span lang=EN-AU> <o:p></o:p></span></li><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>NetFlow</span><span lang=EN-AU><o:p></o:p></span></li><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>HSRP / VRRP</span><span lang=EN-AU><o:p></o:p></span></li><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>IPv6 Support</span><span lang=EN-AU><o:p></o:p></span></li><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>LNS (Up to 200 sessions).</span><span lang=EN-AU><o:p></o:p></span></li><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>MPLS PE</span><span lang=EN-AU><o:p></o:p></span></li><li class=MsoNormal style='color:black;mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;mso-list:l0 level1 lfo1'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif"'>QinQ Tunnel / QinQ Termination</span><span lang=EN-AU> <o:p></o:p></span></li></ul><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Appreciate any insights that can be given on which path to take.</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'> </span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Thanks!</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'> </span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Rhys Hanrahan</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Chief Information Officer</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>Nexus One Pty Ltd</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'> </span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>E: <a href="mailto:support@nexusone.com.au" target="_blank">support@nexusone.com.au</a></span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>P: +61 2 9191 0606</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>W: <a href="http://www.nexusone.com.au/" target="_blank">http://www.nexusone.com.au/</a></span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>M: PO Box 127, Royal Exchange NSW 1225</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'>A: Level 10, 307 Pitt Street, Sydney NSW 2000</span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'> </span><span lang=EN-AU style='color:black'><o:p></o:p></span></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'><span lang=EN-AU style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:black'><img border=0 width=302 height=47 id="_x0000_i1026" src="cid:image001.png@01CF58D7.600161F0" alt="cid:AC695111-1B5F-45C1-B097-6093A0880284"></span><span lang=EN-AU style='color:black'><o:p></o:p></span></p></div></div></div></div></div><p class=MsoNormal style='margin-bottom:12.0pt'><span style='color:black'><br>_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></span></p></blockquote></div><p class=MsoNormal><span style='color:black'><o:p> </o:p></span></p></div></div></div></div></div></div></div></div></body></html>