SSH on the router - was( IT security people sleep well)
Randy Bush
randy at psg.com
Mon Jun 7 22:07:47 UTC 2004
> Well the way we did it, all routers were accessible from 2
> (large) POPs, two being in the NOC, and one being elsewhere
well, in my life (pop != noc). but access usually is from noc,
engineering hq, and, if she's lucky, somewhere easy for the
escalation victim of last resort to reach.
whether some of these are data centers, i.e. where customers
may have machines, is irrelevant. though if customers might
gain physical access by breaking only one layer of physical
security, i would not be happy.
randy
More information about the NANOG
mailing list