nanog mailing list archives

Re: Carrier Grade NAT


From: Lee Howard <Lee () asgard org>
Date: Fri, 01 Aug 2014 12:01:48 -0400



On 7/30/14 3:45 PM, "joshua rayburn" <jbrayburn () gmail com> wrote:


Starting in 3.10 code you can utilize Bulk Port Allocation to carve out
small consecutive port bundles for end users as to not mess up SIP
functionsand High Speed Logging to log individual customers ports for law
enforcement needs without overrunning your logging server.


http://tools.ietf.org/html/rfc6056 documents a security concern with bulk
port assignments.

Lee



Current thread: