[afnog] NAT and Routing Engine on Juniper

Loganaden Velvindron loganaden at gmail.com
Tue Sep 16 09:51:28 UTC 2014


On Tue, Sep 16, 2014 at 10:58 AM, Mark Tinka <mark.tinka at seacom.mu> wrote:
> On Tuesday, September 16, 2014 08:53:06 AM Tarig Yassin
> wrote:
>
>> Thanks Mark
>>
>> what bout Cisco 7206 VXR NPE-G1?
>
> Certainly a cheaper (and IMHO, simpler) option if you want
> basic NAT that won't scale beyond a couple of tens of Mbps.
>
> NAT on Juniper's can be pricey if you aren't doing tons of
> bandwidth due to the extra hardware required to do so. Of
> course, current generation platforms such as the MX have in-
> built "Services" modules that can offload much (but not all)
> of these additional services. But again, those boxes aren't
> cheap by any means.
>
> You can also consider pfSense. It can carry quite a bit of
> NAT traffic on a decently-spec'ed server.

Or you might also consider OpenBSD, given the major improvements that
have gone into their version of PF, which is the firewalling subsystem
of BSD-derived OSes.

>
> Mark.
>
> _______________________________________________
> afnog mailing list
> http://afnog.org/mailman/listinfo/afnog



-- 
This message is strictly personal and the opinions expressed do not
represent those of my employers, either past or present.



More information about the afnog mailing list