Saucepan

User Tools

Site Tools

Trace: • abbreviations • dns • nios_x_servers • azure • netbios • rpz_feeds • vmotion • dot_doh • misc • useful_nios
infoblox_uddi:nios_x_xaas

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
infoblox_uddi:nios_x_xaas [2026/02/03 11:50] – [POP] bstaffordinfoblox_uddi:nios_x_xaas [2026/03/12 10:27] (current) – [BGP] bstafford
Line 26: Line 26:
 Identity can be KeyID or FQDN or Email. This is because some vendors (e.g. Cisco ASA firewall) don't support KeyID. Identity can be KeyID or FQDN or Email. This is because some vendors (e.g. Cisco ASA firewall) don't support KeyID.
 ===== VPN ===== ===== VPN =====
 +  * Policy based VPN not supported. Route based VPN only.
 +
 The first exchange for the Phase two will work as the PFS is only exchanged during the 'Create Child_SA' exchange this usually occurs during re-key hence we see the first time the phase two comes up with the PFS mismatch, as one of the traffic selector is used during the IKE_SA_Init, and IKE_AUTH exchange The first exchange for the Phase two will work as the PFS is only exchanged during the 'Create Child_SA' exchange this usually occurs during re-key hence we see the first time the phase two comes up with the PFS mismatch, as one of the traffic selector is used during the IKE_SA_Init, and IKE_AUTH exchange
  
Line 46: Line 48:
  
 <code>Network > Virtual routers > BGP > Peer Group > Peer > Multi Hop</code> <code>Network > Virtual routers > BGP > Peer Group > Peer > Multi Hop</code>
 +
 +  * NIOS-XaaS currently accepts up to 100 routes over BGP.
 +  * NIOS-XaaS recognized BGP Path Prepending and will prefer shorter paths over longer paths when it gets the same route from multiple peers.
 +  * NIOS-XaaS will not use ECMP when it gets the same route from multiple peers. It will maintain one path at any given time. It will choose based on Path length (shortest is preferred), MED Metric (lowest is preferred) and router ID (lowest is preferred).
 +  * 2 byte AS numbers have a max vlue of 
 +      * [[https://datatracker.ietf.org/doc/html/rfc4893|RFC 4893]] defines 2 byte AS numbers (0 - 65,535)
 +      * [[https://datatracker.ietf.org/doc/html/rfc6996|RFC 6996]] defines private range of 2 byte AS numbers (64,512 - 65,534 inclusive)
 +  * 4 byte AS numbers have a max value of 4,294,967,295
 +      * [[https://datatracker.ietf.org/doc/html/rfc4893|RFC 4893]] defines 4 byte AS numbers (0 - 4,294,967,295)
 +      * [[https://datatracker.ietf.org/doc/html/rfc6996|RFC 6996]] defines private range of 4 byte AS numbers (4,200,000,000 - 4,294,967,294 inclusive)
 +      * [[https://www.arin.net/resources/guide/asn/|ASN reserved by ARIN for private use]]
 +
 +BGP 4 Byte information [[https://sites.google.com/site/amitsciscozone/bgp/understanding-bgp-4-byte|here]].
 ===== Locations ===== ===== Locations =====
 Auto location selection of Service works based on the nearest active POP to the geometric center of all Access Locations. Auto location selection of Service works based on the nearest active POP to the geometric center of all Access Locations.
infoblox_uddi/nios_x_xaas.1770119418.txt.gz · Last modified: by bstafford