The trick with 1072 is you need to disable connection tracking. Ours have been 100% stable ever since doing that. That means no NAT and only basic firewall rules (src/dst/ip/port). Just do your NAT and firewall stuff on other boxes.
From: AF <af-boun...@af.afmug.com> On Behalf Of Jason McKemie Sent: Thursday, July 01, 2021 1:48 PM To: AnimalFarm Microwave Users Group <Af@af.afmug.com> Subject: [AFMUG] Gateway Router Recommendation I'm looking to update my gateway router (currently a CCR1036) to something that can support 2 10GE WAN connections running BGP. I'd probably want at least 3 or 4 SFP+ ports. The CCR1072 comes to mind, but I've read horror stories relating to this model, so I'm looking at other options. Those of you that use Juniper or Cisco, what would you recommend? I'd probably be buying gray-market on these brands due to the price. Thanks. Jason
-- AF mailing list AF@af.afmug.com http://af.afmug.com/mailman/listinfo/af_af.afmug.com
