Re: SSH on the router - was( IT security people sleep well)

Well the way we did it, all routers were accessible from 2 (large) POPs, two being in the NOC, and one being elsewhere

well, in my life (pop != noc). but access usually is from noc, engineering hq, and, if she's lucky, somewhere easy for the escalation victim of last resort to reach. whether some of these are data centers, i.e. where customers may have machines, is irrelevant. though if customers might gain physical access by breaking only one layer of physical security, i would not be happy. randy