From: Gregg Malcolm (gregg.malcolm@gmail.com)
Date: Mon Jul 14 2008 - 15:25:34 ART
We have hit the peak ACE limit (about 74k) on our FWSM's on more than one
occasion so I understand where you are coming from. I can't tell from the
paper if IOS supports mixed protocols (i.e TCP and UDP) in a service object
like ASA 8.0 does. I'm no PIX/ASA/FWSM fan but the ability to use mixed
protocols in a service object will help us a ton.
I was more remarking on the interesting choice of acronym on Cisco's part.
BFD? What's next SOL, FUBAR, etc? Have they run out of choices or English
speakers?
Gregg
On Mon, Jul 14, 2008 at 1:49 PM, Rik Guyler <rik@guyler.net> wrote:
> That is a big deal when you're stuck managing 100+ VPN connections on a
> router. I love the modularity of VPN on IOS but hate the access controls
> part. This is huge for people still supporting router VPNs instead of
> dealing with the flaky ASA code. Try managing a monolithic ACL with
> several
> thousand lines. Object groups make this a ton easier.
>
> Rik
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> Gregg Malcolm
> Sent: Monday, July 14, 2008 12:05 PM
> Cc: security@groupstudy.com; GS CCIE-Lab
> Subject: Re: Check out 12.4.20T
>
> BFD. Whoops - forgot that's a new feature ;-)
>
> Gregg
>
> On Mon, Jul 14, 2008 at 11:35 AM, Luan M Nguyen <luan@t3technology.com>
> wrote:
>
> > ...if anyone interested...
> >
> >
> >
>
> http://www.cisco.com/en/US/prod/collateral/iosswrel/ps8802/ps6968/ps6441/pro
> >
> duct_bulletin_c25-409474.html<
> http://www.cisco.com/en/US/prod/collateral/ios
> swrel/ps8802/ps6968/ps6441/product_bulletin_c25-409474.html<http://www.cisco.com/en/US/prod/collateral/iosswrel/ps8802/ps6968/ps6441/product_bulletin_c25-409474.html>
> >
> >
> > Lots of new cool features :). Now you can do the object-group in the
> > router
> > ACL just like the ASA's!
> >
> >
> >
> > -Luan
> >
> >
> >
> > Blog: http://www.t3technology.com/luan/
> >
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Mon Aug 04 2008 - 06:11:55 ART