Home page logo
/

nanog logo nanog mailing list archives

Re: FTTH CPE landscape
From: Owen DeLong <owen () delong com>
Date: Thu, 4 Aug 2011 14:32:22 -0700


On Aug 4, 2011, at 2:08 PM, Jay Ashworth wrote:

----- Original Message -----
From: "Owen DeLong" <owen () delong com>

On Aug 4, 2011, at 8:35 AM, Jay Ashworth wrote:

- Generic consumer grade NAT/Firewall

Hobby horse: please make sure it support bridge mode? Those of us who
want to put our own routers on the wire will hate you otherwise.

Why? As long as it can be a transparent router, why would it need to
be a bridge?

Ask a Verizon FiOS customer who wants to run IPv4 VPNs.

He didn't say IPv6 only, right?  

I have a couple of customers who can't get bridge mode on residence FiOS 
service, and therefore can't run their own routers to terminate IPsec.

If they could get routed static IPv4 rather than bridge, why wouldn't they
be able to terminate IPSec VPNs? Note I did say TRANSPARENT router.
That would mean no NAT and routed static IPv4.

Owen

Attachment: smime.p7s
Description:


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]