[143036] in North American Network Operators' Group
Re: OOB
daemon@ATHENA.MIT.EDU (=?utf-8?B?TcOlbnM=?= Nilsson)
Tue Jul 26 17:37:13 2011
Date: Tue, 26 Jul 2011 23:34:04 +0200
From: =?utf-8?B?TcOlbnM=?= Nilsson <mansaxel@besserwisser.org>
To: Christopher Morrow <morrowc.lists@gmail.com>
In-Reply-To: <CAL9jLaYN5g=UTHWtSE-v34Y-eTqgtthEejE49q9Hck1CNKiWDw@mail.gmail.com>
Cc: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--wQkw7DhpL9hyPo7K
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Subject: Re: OOB Date: Tue, Jul 26, 2011 at 10:14:21AM -0400 Quoting Christ=
opher Morrow (morrowc.lists@gmail.com):
> On Tue, Jul 26, 2011 at 10:03 AM, Paul Stewart <paul@paulstewart.org> wro=
te:
> > We do everything in-band with strict monitoring/policies in place.
>=20
> what do you do if your in-band fails? if a router/switch/ROADM is
> isolated from the rest of your network?
> (isn't that the core point of the OP?)
Vendor C sells nice small routers with something like CAB-OCTAL-ASYNC
_and_ a 3G modem instead of the BRI port. The 3G modem keeps its
connection up (our telecom provider has true flat rate on domestic 3G,
YMMV) and VPN's to the head office much like any other telecommuter. This
cuts through all telco stupidity with firewalled or NAT'ed 3G phones
etc, especially if one uses the break-out-from-hotel-LAN functions of
the VPN system. The router of course actively keeps the VPN up and
reestablishes it if needed.
--=20
M=C3=A5ns Nilsson primary/secondary/besserwisser/machina
MN-1334-RIPE +46 705 989668
I'm wearing PAMPERS!!
--wQkw7DhpL9hyPo7K
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAk4vMswACgkQ02/pMZDM1cUyrQCgpMQsHWOszT04DYLMGnHzV8gK
+8wAoJTdUYPSkGDKjvx39VIf0IUSxCGc
=z/BK
-----END PGP SIGNATURE-----
--wQkw7DhpL9hyPo7K--
