Secure your PE VTYs!
only use hostroutes for NMS
- RIP, OSPF, EBGP has better admin distance than IBGP:-(
put hostroutes to Null0 for NMS into all VRFs
filter routing updates from customer
- do not accept all internal address ranges (NMS, BB)
- secure, but could impact customer connectivity