- NANOG - lists.nanog.org

Network Vendor suggestions/reviews, Arista Networks, Dell Force10, Juniper, Extreme Networks etc...
by Blake Pfankuch - Mailing List 19 Jun '13

19 Jun '13

Howdy, I have been working on a proposal for the organization I work for to move into the 10gbit datacenter. We have a small datacenter currently of about 1000 ports of 1gbit. We have traditionally been a full Cisco shop, however I was asked to do a price comparison as well as features with other major alternative vendors. I was also asked to do some digging as far as what "the real world" thinks about these possible vendors. We currently have 2 Cisco 6509's with 8 48 port cards Sup 3BXL, 2 Cisco 4506 with 5x 48 port card and Sup V's and 2 4900M switches providing 10gbit to a very specialized implementation. With all of our technology, we try to not be bleeding edge, but oozing edge. We need 5 9's or more of uptime yearly so stability is preferable to cool features. We currently have single supervisors in all of our switches (not my decision) and it has bit us recently. Everything we are looking at needs to support NSF/SSO/VSS of some kind. What we have been looking to replace it with in Cisco world is Nexus 7004 Core and Nexus 5596UP with 2200 series Fabric extenders for Dist/Access as well as 2200 Fabric Extenders within our Dell Blade Chassis. Realistically we will be under 800 ports of 10gbit (excluding Blades) which puts us in a tough spot from what I can find. Currently everything we have is EOR, however TOR would make more sense allowing us to switch to SFP+ twinax connectivity to servers. With this in mind, I have a few questions... It was mandated that I look at a company "Arista Networks" and investigate possible options. I had not heard much about them, so I look to the experts. Pro's and Con's? Real world experience? Looks to me they have a lot of cool features, but I'm slightly concerned with how new they might be, how reliable it would be as well as their QA/bugfix history. Also 24x4 support and hardware replacement. Everything in our datacenter currently has a 2 or 4 hour cisco contract on it and critical core components have a cold spare in inventory. Dell Force 10... I know Dell tries to get you to drink the Koolaid on this solution, I was a former Dell Partner and they even pushed me to get demo equipment going... What's the experience with their chassis switches? Stability? Configuration sanity? What do people like? What do people hate? Juniper. What do people like? What do people hate? Have the Layer 2 issues of historical age gone away? Is the config still xml ish? It has been about 5 years since I worked with anything Juniper. Extreme networks. I know very little about them historically. What is good, what is bad? Is the config sane? I would be happy to compile any information I find, as well as our sanitized internal conclusions. On and off list responses welcome. If there is another vendor anyone would suggest, please add them to the list with similarly asked questions. Thanks! Blake

10 13

Re: [afnog] gTLDs opened up
by Randy Bush 19 Jun '13

19 Jun '13

> How is AFRINIC responsible of that? >> AfriNIC put these wonderful people on stage at the African Internet >> Summit. afrinic put them on the stage. it is said because you needed to fill slots in the program, but i really do not know why or care. randy

1 0

Re: 10gig coast to coast
by Jakob Heitz 19 Jun '13

19 Jun '13

> Date: Mon, 17 Jun 2013 22:04:52 -0600 > From: Phil Fagan <philfagan(a)gmail.com> > ... you could always > thread the crap out of whatever it is your transactioning across the link > to make up for TCP's jackknifes... What is a TCP jackknife? Cheers. Jakob.

6 8

Re: huawei (oscilloscopes and frequency analysis)
by Jazz Kenny 18 Jun '13

18 Jun '13

On Mon, Jun 17, 2013 at 7:38 AM, Tony Patti <tony(a)swalter.com> wrote: > Thanks, I liked your pointer to the SDR. > > But can I ask you for a bit more info about your statement > > "where oscilloscopes and frequency analysis is available to anyone with some > Google-fu" > > We don't need as much test equipment before? > > (as a guy with an oscilloscope in his basement, I don't see how Google can > do what that device can). > > > > Thanks, > > Tony All I meant was that the tools are relatively accessible to anyone with the desire to look - An oscilloscope with the necessary freq. range to study 4G communications can be bought or fabricated (all that's really needed is a microcontroller with an ADC, some gain amps and time), an appropriate SDR to intercept the signals shouldn't be too hard to source, and that community has been blowing up for a few years now. Hell, there are even a couple examples of LGA 4G receivers floating around in the wild (gtm801, for example). Ignoring all of that, there are commercial options like the YellowFin 4G analyzer. No idea how much one of those costs, though. Now, like Jay said, there are the issues of encryption and such, but that's just another barrier to entry. A little Google-fu could probably source a paper dealing with its implementation, at least. I doubt it would be easy, but if the motivation exists, the required test bed is easily assembled, and the information is available. Not like we're talking about intercepted military GPS bands or something. It's a consumer device that can sit on a workbench and be tested at the leisure of the security researcher. - J.

4 3

Re: huawei
by Patrick W. Gilmore 18 Jun '13

18 Jun '13

On Jun 13, 2013, at 12:28 , "Avi Freedman" <avi(a)freedman.net> wrote: > I disagree. > > There have already been lab demos of sfps that could inject frames and APTs are pretty advanced, sinister, and can be hard to detect now. > > I'm not suggesting Huawei is or isn't enabling badness globally but I think it would be technically feasible. I am assuming a not-Hauwei-only network. The idea that a router could send things through other routers without someone who is looking for it noticing is ludicrous. Of course, most people aren't paying attention, a few extra frames wouldn't be noticed most likely. But if you are worried about it, you should be looking. Also, I find it difficult to believe Hauwei has the ability to do DPI or something inside their box and still route at reasonable speeds is a bit silly. Perhaps they only duplicate packets based on source/dest IP address or something that is magically messaged from the mother ship, but I am dubious. It should be trivial to prove to yourself the box is, or is not, doing something evil if you actually try. -- TTFN, patrick > ------Original Message------ > From: Patrick W. Gilmore > To: NANOG list > Subject: Re: huawei > Sent: Jun 13, 2013 12:22 PM > > On Jun 13, 2013, at 12:18 , Nick Khamis <symack(a)gmail.com> wrote: > >> A local clec here in Canada just teamed up with this company to >> provide cell service to the north: >> >> http://cwta.ca/blog/2012/09/24/ice-wireless-iristel-and-huawei-partner-for-… >> >> Scary.... > > Why? > > Do you think Huawei has a magic ability to transmit data without you noticing? > > If you don't want to use Hauwei because they stole code or did other nasty things, I'm right there with you. If you believe a router can somehow magically duplicate info and transport it back to China (ignoring CT/CU's inability to have congestion free links), I think you are confused. > > -- > TTFN, > patrick > > >

22 64

Re: recommended outdoor enclosures
by Tony Cole 18 Jun '13

18 Jun '13

The Skid-mounted C3Spear in a NEMA4 version would work perfectly for this application. http://www.ellipticalmobilesolutions.com/c3spear.html

1 0

Single AS multiple Dirverse Providers
by Dennis Burgess 18 Jun '13

18 Jun '13

I have a network that has three peers, two are at one site and the third is geographically diverse, and there is NO connection between the two separate networks. Currently we are announcing several /24s out one network and other /24s out the second network, they do not overlap. To the internet this works fine, however, providers a/b at site1 do not send us the two /24s from site b.. We have requested them to, but have not seen them come in, nor do we have any filters that would prohibit them from coming in. Is this normal? Can we receive those routes even though they are from our own AS? What is the "best practice" in this case? Dennis Burgess, Mikrotik Certified Trainer Author of "Learn RouterOS- Second Edition <http://www.wlan1.com/product_p/mikrotik%20book-2.htm> " Link Technologies, Inc -- Mikrotik & WISP Support Services Office: 314-735-0270 <tel:314-735-0270> Website: http://www.linktechs.net <http://www.linktechs.net/> - Skype: linktechs <skype:linktechs?call> -- Create Wireless Coverage's with www.towercoverage.com <http://www.towercoverage.com/> - 900Mhz - LTE - 3G - 3.65 - TV Whitespace

13 26

10gig coast to coast
by eric clark 18 Jun '13

18 Jun '13

Greetings I may be needing 10 gig from the West Coast to the East Coast some time in the next year. I've got my ideas on what that would cost, but I don't have anything that big. This could be a leased line, part of a cloud with Verizon, NTT, Sprint, or whoever as the provider, etc. I'm just looking to see what a budget cost for something like this is, and who can provide such service. Your help is greatly appreciated, feel free to respond directly or to the thread. E

7 8

recommended outdoor enclosures
by Chuck Anderson 17 Jun '13

17 Jun '13

I'm in need of my first free-standing, pad-mounted outdoor enclosure, 19" rack rails, 12-18 rack units, with about 400W of heat load inside, for use in the Massachusetts climate. What do people recommend as far as contruction, cooling/heating options, NEMA ratings, security options, etc. for this use? I was hoping to keep the inside temperature between 50 and 85 degrees Fahrenheit, although my worst-case components are rated for 41 to 104 F (4 - 40 C). If a full mechanical A/C system can be avoided, even better. A thermo-electric cooler would be nice. Thanks.

9 11

Re: huawei
by Jazz Kenny 17 Jun '13

17 Jun '13

Why is it so difficult? Hiding communications is an intriguing subject - My ears perked up a bit at the Multics remark - Morse is something that probably never would have even crossed my mind. EDIT: Okay, now it's sent to the list. DOHF! On Sun, Jun 16, 2013 at 1:03 PM, Jazz Kenny <trapperjohn117(a)gmail.com>wrote: > Why is it so difficult? Hiding communications is an intriguing subject - > My ears perked up a bit at the Multics remark - Morse is something that > probably never would have even crossed my mind. > > > On Sun, Jun 16, 2013 at 12:44 PM, Jay Ashworth <jra(a)baylink.com> wrote: > >> ----- Original Message ----- >> > From: "Phil Fagan" <philfagan(a)gmail.com> >> >> > That's a very interesting point about the 4G puck....do you mean >> > modulating >> > data over side-lobes? To your point, I as a subscriber would have no >> > way >> > every knowing that unless of course I hooked up my specanny and >> > started to >> > try to decode the sidelobes....I imagine most folks don't do that ( if >> > thats how one would even go about it ) >> >> Not at all. >> >> The *standard air-data link* coming out the back of the puck, in "4G" >> (protip: >> it's not) LTE, *is not something that the user can see*, without great >> effort. >> >> So, that commercial end-user customer of Verizon has no way to see what >> extra data *the puck itself* might be phoning home with. >> >> Cheers, >> -- jra >> -- >> Jay R. Ashworth Baylink >> jra(a)baylink.com >> Designer The Things I Think RFC >> 2100 >> Ashworth & Associates http://baylink.pitas.com 2000 Land >> Rover DII >> St Petersburg FL USA #natog +1 727 >> 647 1274 >> >> >

3 2