Hehe, curly one here  :-)

I'm currently planning a total re-implementation of the network here to
provide as much fault tolerance as possible. That means I'm going to
need multiple upstream connections running BGP4, and multiple firewalls
that can auto-failover.

This is all made more complex because internally we're running 3
separate subnets (workstations, servers, and colocated servers), and
they all need to be kept segregated and untrusted.

I've drawn up a diagram of the propose

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *