May 2012 - NANOG - lists.nanog.org

L3VPN MPLS - Internal BGP between CE - PE
by Javor Kliachev 08 May '12

08 May '12

Dear Members, We are ISP which use the same autonomous system to hold External BGP sessions and for implementing L3VPN MPLS ( as internal BGP ) We have a internal office router that receives a "default route" via IBGP from our border router. I'll try to briefly explain the problem: This internal router named (CE) keeps IBGP session with PE router in VRF "def". CE ( GlobalTable ) - PE ( vrf "DEF" ) The aim is "default route" IBGP received from the the ISP provider to be redistributed to PE in all vrf "DEF" After establishing the session we observe that actualy that "default route" is propagating successful in whole vrf "DEF" but MPLS does not set label of this route and the traffic is blackholed. When using another protocol as OSPF and EIGRP everything is OK. We opened case in Cisco TAC and they explaned that IOS official is not support IBGP between PE and CE. Only EBGP. I would like to know if any of you had similar problem and if there is any workaround in Cisco platform. I see for example Juniper has special commands for resolving this problem. Thanks in advance! Best~ Javor Kliachev

2 4

Are there any gmail admins reading here?
by Georgi Chorbadzhiyski 08 May '12

08 May '12

Guys can somebody send me a contact with gmail admin that can fix this: > Delivery to the following recipient failed permanently: > > my@email > > Technical details of permanent failure: > Google tried to deliver your message, but it was rejected by the recipient > domain. We recommend contacting the other email provider for further information > about the cause of this error. The error that the other server returned was: 517 > 517 HELO mail-gy0-f174.google.com does not exist. (state 12). I receive a lot of email forwarded by gmail to my email and I'm having problems only when the emails are forwarded over the server that says he is mail-gy0-f174.google.com. This happens to about 20-40 emails each day. Over a thousand more are forwarded by gmail to me without any problems. host mail-gy0-f174.google.com 8.8.8.8 Using domain server: Name: 8.8.8.8 Address: 8.8.8.8#53 Aliases: Host mail-gy0-f174.google.com not found: 3(NXDOMAIN) I have written to postmaster(a)gmail.com over a week ago, but as expected the email send there just goes to /dev/null. -- Georgi Chorbadzhiyski http://georgi.unixsol.org/

4 4

What is a link-local address?? WAS: Re: JUNOS forwards IPv6 link-local packets
by Matthew Petach 08 May '12

08 May '12

(tl;dr -- IPv6 link-local definition is ambiguous and inconsistent across vendors) I'm curious about what people's perception of valid link-local addresses is; that is, what specifically makes a valid link-local address? The top portion of RFC 4291 lists the link-local prefix as: 2.4. Address Type Identification The type of an IPv6 address is identified by the high-order bits of the address, as follows: Address type Binary prefix IPv6 notation Section ------------ ------------- ------------- ------- Link-Local unicast 1111111010 FE80::/10 2.5.6 Global Unicast (everything else) (from http://tools.ietf.org/html/rfc4291#section-2.4 ) Thus, it would *seem* that an address such as fe80:1:1:1::2/64 when configured on an interface for its link-local address would be a valid link-local address, as it falls within fe80::/10 However, when we read section 2.5.6, we see a different definition: 2.5.6. Link-Local IPv6 Unicast Addresses Link-Local addresses are for use on a single link. Link-Local addresses have the following format: | 10 | | bits | 54 bits | 64 bits | +----------+-------------+---------------------+ |1111111010| 0 | interface ID | +----------+-------------+---------------------+ Link-Local addresses are designed to be used for addressing on a single link for purposes such as automatic address configuration, neighbor discovery, or when no routers are present. Routers must not forward any packets with Link-Local source or destination addresses to other links. (from http://tools.ietf.org/html/rfc4291#section-2.5.6 ) That section indicates that *only* addresses out of fe80:0:0:0::/64 are valid link local addresses; that is, where the upper 64 bits are precisely 1111111010000000000000000000000000000000000000000000000000000000 (1111111010 followed by 54 0 bits). Is section 2.5.6 wrong? Should it have been written more like section 2.5.7, that specified the address as a prefix, followed by 54 bits of subnet ID? Or did the authors really intend that most of fe80::/10 remain unused, and *only* a single /64 at the very start of fe80::/10 would be valid? I ask this because I'm running into situations where indeed it seems that some router vendors do literally only treat fe80::/64 as link-local, and *all other addresses out of fe80::/10 are treated as global unicast*. This has potential implications on the types of filtering people may be assuming their router vendors are doing; and, with respect to the parent thread, when you talk about routers forwarding link-local packets, it would probably be good to verify with your vendors whether they take the sentence "Routers must not forward any packets with Link-Local source or destination addresses to other links." to apply to all of fe80::/10, or only to the more restrictive fe80::/64 specified in section 2.5.6. I will note that empirical testing shows that even different product lines from the same vendor show different behaviours, as though some engineers read section 2.5.6 in detail, and others simply read section 2.4, and skipped the fine print. So...operators...what do *you* think the correct definition is? And which way would you prefer your router vendors to read RFC4291? Do you prefer the loose definition from section 2.4, or do you prefer the stricter definition from section 2.5.6? Given that the RFC is ambiguous, and has been for the past six years, I'd tend to think the IETF doesn't really have a strong position one way or the other, and is leaving it up to us as operators to vote with our money, and give guidance to router vendors as to which definition we'd like them to follow. Personally, I know my vote is to go with section 2.4, rather than leave all the rest of fe80::/10 in an unusable grey state, where some devices treat it as global unicast, and others treat it as link-local. If we all standardize on the reading in 2.5.6, we leave the entire rest of the /10 fallow, with only one /64 usable from it. Which way do *you* vote? Thanks! Matt

8 9

FW: Force10 E Series at the edge?
by Roberts, Brent 07 May '12

07 May '12

Is anyone running an E300 Series Chassis at the internet edge with multiple Full BGP feeds? 95th percent would be about 300 meg of traffic. BGP session count would be between 2 and 4 Peers. 6k internal Prefix count as it stands right now. Alternative are welcome. Thought about the ASR1006 but I need some local switching as well. Full requirements include Full internet Peering over GigE Links. Fully Redundant Power Redundant "Supervisor/Route Processor" Would prefer a Small Chassis unit. (under 10u) Would also prefer a single unit as opposed to a two smaller units. ________________________________ This email and any attached files may contain confidential and/or privileged material and is intended solely for the use of the person to whom it is addressed. Any review, retransmission, dissemination or other use of or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender immediately and delete it and all attachments from your computer. Progressive Solutions is not liable for any errors or omissions in the content or transmission of this email.

10 12

RE: Network diagram app that shows realtime link utilizatin
by Mike Devlin 07 May '12

07 May '12

Check out InterMapper (http://www.intermapper.com/) Its java based, but works real well

6 6

None
by Jhon Dave Bayawa 07 May '12

07 May '12

thankyou Jhon Dave Bayawa

1 0

AD
by Jhon Dave Bayawa 06 May '12

06 May '12

Jhon Dave Bayawa

1 0

mulcast assignments
by Philip Lavine 05 May '12

05 May '12

How do I get a registered multicast block?

10 14

Verizon 1xRTT/EVDO for OOB
by Christopher J. Pilkington 05 May '12

05 May '12

Is anyone using Verizon 1xRTT/EVDO ("3G") for OOB work? I'm trying to sort out how exactly to order a compatible service from them. Unfortunately I don't manage our Verizon Wireless relationship, so I need to be specific. Is there a service code or name they refer to this service as? Looking for low bandwidth, static IP. -cjp

3 2

BGP Update Report
by cidr-report＠potaroo.net 04 May '12

04 May '12

BGP Update Report Interval: 26-Apr-12 -to- 03-May-12 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS8402 67265 2.9% 34.0 -- CORBINA-AS OJSC "Vimpelcom" 2 - AS29049 53989 2.3% 129.8 -- DELTA-TELECOM-AS Delta Telecom LTD. 3 - AS9829 33372 1.4% 30.6 -- BSNL-NIB National Internet Backbone 4 - AS12479 28144 1.2% 120.3 -- UNI2-AS France Telecom Espana SA 5 - AS9198 27568 1.2% 109.0 -- KAZTELECOM-AS JSC Kazakhtelecom 6 - AS32528 25666 1.1% 6416.5 -- ABBOTT Abbot Labs 7 - AS1785 22634 1.0% 12.0 -- AS-PAETEC-NET - PaeTec Communications, Inc. 8 - AS4538 21799 0.9% 4.0 -- ERX-CERNET-BKB China Education and Research Network Center 9 - AS7029 19731 0.8% 10.3 -- WINDSTREAM - Windstream Communications Inc 10 - AS24560 19089 0.8% 24.3 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 11 - AS8452 18838 0.8% 21.4 -- TE-AS TE-AS 12 - AS8866 17069 0.7% 39.1 -- BTC-AS Bulgarian Telecommunication Company Plc. 13 - AS17974 17032 0.7% 16.9 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 14 - AS28573 15644 0.7% 13.2 -- NET Servicos de Comunicao S.A. 15 - AS26615 14630 0.6% 18.4 -- Tim Celular S.A. 16 - AS2118 14368 0.6% 11.0 -- RELCOM-AS OOO "NPO Relcom" 17 - AS1660 14117 0.6% 181.0 -- ANS-CORP-NY - ANS Communications 18 - AS45899 14013 0.6% 42.6 -- VNPT-AS-VN VNPT Corp 19 - AS27738 13750 0.6% 25.0 -- Ecuadortelecom S.A. 20 - AS6713 12978 0.6% 26.4 -- IAM-AS TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS44798 10303 0.4% 10303.0 -- PERVOMAYSK-AS PP "SKS-Pervomaysk" 2 - AS32528 25666 1.1% 6416.5 -- ABBOTT Abbot Labs 3 - AS3 3283 0.1% 366.0 -- ASTELEK Tele-K Ltd. 4 - AS32541 1320 0.1% 1320.0 -- SAIRB-AS - Schulman Associates Institutional Review Board, Inc. 5 - AS17408 3099 0.1% 1033.0 -- ABOVE-AS-AP AboveNet Communications Taiwan 6 - AS55665 990 0.0% 990.0 -- STMI-AS-ID PT Sampoerna Telemedia Indonesia 7 - AS13263 1872 0.1% 936.0 -- HAYATNET-AS HayatNet Bilgi ve Iletisim Hizmetleri A.S 8 - AS34043 910 0.0% 910.0 -- RISS Internet Security Systems SRL 9 - AS36955 902 0.0% 902.0 -- Matrix-ASN1 10 - AS4658 875 0.0% 875.0 -- NETFRONT-AS Netfront Information Technology Limited, 11 - AS35155 704 0.0% 704.0 -- VERBASOFT-AS Verbasoft ASN 12 - AS1355 699 0.0% 699.0 -- AHMSI-HQDC - American Home Mortgage Servicing, Inc. 13 - AS57767 687 0.0% 687.0 -- RTTC-AS Federal State-owned Enterprise Russian Television and Radio Broadcasting Network 14 - AS36948 1304 0.1% 652.0 -- KENIC 15 - AS33074 627 0.0% 627.0 -- ISC-NBO1 Internet Systems Consortium, Inc. 16 - AS50026 7703 0.3% 481.4 -- KODOTEL-LTD-AS Kodotel Ltd 17 - AS38857 925 0.0% 462.5 -- ESOFT-TRANSIT-AS-AP e.Soft Technologies Ltd. 18 - AS36029 437 0.0% 437.0 -- CASAS - CASAS 19 - AS49072 430 0.0% 430.0 -- APSUARA-AS TCA Apsuara Ltd. 20 - AS37303 846 0.0% 423.0 -- AIRTELMADA TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 130.36.34.0/24 12815 0.5% AS32528 -- ABBOTT Abbot Labs 2 - 130.36.35.0/24 12815 0.5% AS32528 -- ABBOTT Abbot Labs 3 - 91.202.212.0/22 10303 0.4% AS44798 -- PERVOMAYSK-AS PP "SKS-Pervomaysk" 4 - 62.36.252.0/22 8120 0.3% AS12479 -- UNI2-AS France Telecom Espana SA 5 - 41.43.147.0/24 7890 0.3% AS8452 -- TE-AS TE-AS 6 - 62.36.249.0/24 6439 0.3% AS12479 -- UNI2-AS France Telecom Espana SA 7 - 62.36.241.0/24 6076 0.2% AS12479 -- UNI2-AS France Telecom Espana SA 8 - 62.36.210.0/24 5943 0.2% AS12479 -- UNI2-AS France Telecom Espana SA 9 - 194.63.9.0/24 5595 0.2% AS1273 -- CW Cable and Wireless Worldwide plc 10 - 182.64.0.0/16 4360 0.2% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 11 - 202.56.215.0/24 3521 0.1% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 12 - 193.105.129.0/24 3283 0.1% AS3 -- ASTELEK Tele-K Ltd. 13 - 202.153.174.0/24 3095 0.1% AS17408 -- ABOVE-AS-AP AboveNet Communications Taiwan 14 - 122.161.0.0/16 2688 0.1% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 15 - 115.170.128.0/17 2387 0.1% AS4847 -- CNIX-AP China Networks Inter-Exchange 16 - 215.65.61.0/24 1753 0.1% AS5800 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 17 - 216.54.202.0/24 1320 0.1% AS32541 -- SAIRB-AS - Schulman Associates Institutional Review Board, Inc. 18 - 187.94.82.0/24 1267 0.1% AS28306 -- TC Net Informática e Telecomunicações LTDA 19 - 187.94.83.0/24 1267 0.1% AS28306 -- TC Net Informática e Telecomunicações LTDA 20 - 189.38.8.0/24 1266 0.1% AS28306 -- TC Net Informática e Telecomunicações LTDA Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0