Re: SSH on the router - was( IT security people sleep well)

[Randy Bush <randy () psg com>]

> Well the way we did it, all routers were accessible from 2
> (large) POPs, two being in the NOC, and one being elsewhere

well, in my life (pop != noc).  but access usually is from noc,
engineering hq, and, if she's lucky, somewhere easy for the
escalation victim of last resort to reach.

whether some of these are data centers, i.e. where customers
may have machines, is irrelevant.  though if customers might
gain physical access by breaking only one layer of physical
security, i would not be happy.

randy