[eix-wg] RIPE63 follow-up proxy-arp

Hi Bertrand, hi Dominik,
I support the auto-security idea as well. Could help to get a couple of "default values" set right on the beginning of configuration.

Best regards,
Florian

EuroTransit GmbH 
global IP transit and carrier services
Chief Technical Officer

Alsterufer 30, D-20354 Hamburg 
fon: +49 40 41354058
fax: +49 40 41354893
E-Mail: florian.hibler at euro-transit.net 
Internet: http://www.euro-transit.net 

EuroTransit GmbH
CEO: Andy Fischer
Commercial Registry: Amtsgericht Hamburg HRB 107158
VAT Number: DE219346766
Registered Office: Hamburg, Germany

Notice: This transmittal and/or attachments may be privileged or confidential. If you are not the intended recipient, you are hereby notified that you have received this transmittal in error; any review, dissemination, or copying is strictly prohibited. If you received this transmittal in error, please notify us immediately by reply and immediately delete this message and all its attachments. Thank you.








On Feb 16, 2012, at 10:31 AM, Dominik Bay wrote:

> Hi Bertrand,
> 
> On Thu, Feb 16, 2012 at 10:04, Bertrand Duvivier (bduvivie)
> <bduvivie at cisco.com> wrote:
>> A/ BGP SOO extended community 0.X (AS=0) on IOS XR was not supported.
>> à This has been fixed and integrated in recent release.
>> 
>> B/ To see if on low end platforms we could change the default for proxy-arp: in IOS proxy-arp is on by default, this not the case for IOS-XR or NX-OS.
>> 
>> We check with our different partners (including service-provider, enterprise and consumer customers). We can’t change the default, lots of enterprise applications and consumer application need it by default.
>> 
>> What we are looking at now: adding a CLI knob  “auto-security [service-provider|enterprise|data-center]”.
>> 
>>  This knob if used with service-provider argument will automatically change few default value and turn off proxy-arp.
> 
> thanks for the update. Much appreciated :-)
> The "auto-security" template is a good idea. If there's a way to do
> "show auto-security" to see the current settings like in show sdm,
> this would be helpful.
> 
> Kind regards,
> Dominik
>