[ixpmanager] Multi Macs

[Joe Wooller]

Thanks, 

We have filters in place to mitigate such issues, and they seem to be working rather well :)
Unfortunately for me our rules from day 1 have been very slack, and trying to enforce such behaviour now is rather difficult.

Joe

On 04/07/2012, at 4:21 PM, Nick Hilliard wrote:

> On 04/07/2012 08:57, Joe Wooller wrote:
>> How do you handle multiple macs per peer?
> 
> We don't.  Ein port, ein mac.  No exceptions, ever.
> 
> Lots of our members use switches too.  We request that they disable
> keepalives / cdp / stp / link local traffic, and we strictly enforce it.
> 
> Last time this policy saved our skin was three weeks ago when a member port
> accidentally looped and spewed all traffic from them back to the exchange
> fabric.  If we had permitted anything more than 1 mac address, this would
> have trashed other members' connectivity too.  As it happened, they just
> took out their own port and we quietly quarantined them.  A week before
> that, exactly the same thing happened in linx, and it took out one of their
> entire infrastructures and severely impacted another.
> 
> So, uh, no.  IXP manager assumes one mac per port.
> 
> Nick
> _______________________________________________
> INEX IXP Manager mailing list
> ixpmanager at inex.ie
> https://www.inex.ie/mailman/listinfo/ixpmanager
> 
> !DSPAM:1,4ff3fd3724051236518828!
> 
>