Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

management interface accessability (was Re: Worm / UDP1434)

  • From: Paul Vixie
  • Date: Sat Jan 25 22:11:51 2003

> > Anybody here on list using Extreme products (Summit/ Alpine/
> > Blackdiamond)?  They sure don't like this traffic one bit. It causes
> > them to not only drop traffic, but spew out every available error
> > message under the sun...
> 
> We use extremes in our core and it did not log much other than CPU issues:
> 
> 01/25/2003 02:20.23 <INFO:SYST> task tNetTask cpu utilization is 88% PC:
> ...

All of the ExtremeNetworks devices I've laid my hands on are in strict L2
mode and their management interfaces are either on private networks or behind
firewalls.  If you are relying on their ACL's to protect your telnet and
snmp access, but are otherwise allowing their management interfaces to hear
traffic from the whole Internet, then you should turn in your badge and go
back to bagging groceries or whatever it is you used to do.  (Same goes for
any management interface on any L1-L2-L3-L4 product made by any vendor, so
I'm not intending to pick on Extreme individually here.)
-- 
Paul Vixie




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.