[sp0ck]

And this is just basic routing and firewall with NAT. Now try to setup 20 MPLS L3-VPN's + dozen VPLS services on top of IS-IS routed network with that ;-)