- NANOG - lists.nanog.org

Re: Cisco Sanitization
by Greg Whynott 14 Jan '11

14 Jan '11

list, sorry for this but this is getting a little annoying. I've tried sending Randy email without luck.. think i'm black listed by his kit, so if someone would kindly forward this to him… Randy, I'm not trying to be difficult or annoy you. Please stop sending me this email which is considered spam by most. 30 messages of with the same unsolicited content is spam. I understand you do not like a signature which 'seems' to contain legal jargon. I understand you know everything about my environment and the policies of my company which I do not define. I undertand you would like me to use gmail and violate my company policy. I don't expect _anything_ from you, but i would appreciate it if you could take some of your apparent talent and put some logic into your proc mail recipe or whatever it is you use to to generate this message. avoid responding with this spam message every time i post to a list you happen to be on. The email was not directed to you directly. should take about someone with your skill set very little effort. thank you. greg On Jan 12, 2011, at 10:50 AM, Randy Bush wrote: > you have sent a message to me which seems to contain a legal > warning on who can read it, or how it may be distributed, or > whether it may be archived, etc. > > i do not accept such email. my mail user agent detected a legal > notice when i was opening your mail, and automatically deleted it. > so do not expect further response. > > yes, i know your mail environment automatically added the legal > notice. well, my mail environment automatically detected it, > deleted it, and sent this message to you. so don't expect a lot > of sympathy. > > and if you choose to work for some enterprise clueless enough to > think that they can force this silliness on the world, use gmail, > hotmail, ... > > randy -- This message and any attachments may contain confidential and/or privileged information for the sole use of the intended recipient. Any review or distribution by anyone other than the person for whom it was originally intended is strictly prohibited. If you have received this message in error, please contact the sender and delete all copies. Opinions, conclusions or other information contained in this message may not be that of the organization.

7 7

How are you aggregating WAN customers these days?
by Michael Ruiz 14 Jan '11

14 Jan '11

We used that topology, with an Adtran MX 2800 19" rack version. We would take our channelize DS-3 from the Telco and the Cisco PA-MC2T3 cards and in turn wire those to a DSX-1 panel. We then did 1 to 1 DS1 X-connects on the panel. That was starting to get too much of a pain as services grew, so we went with a DACS and that took care of having to do all that DSX-1 wiring. Ugh. >The ASRs seem to be the consensus in a lot of places. Wondering if >anyone has tried anything like aggregating T1 customers onto a mux >box, then connecting that back to a 6500. >I work in that kind of topology all day long/ both in 6500 & ASR's. >All is well/ >On Mon, Jan 10, 2011 at 7:51 AM, Chris <behrnetworks at gmail.com <https://mailman.nanog.org/mailman/listinfo/nanog> > wrote: > Hello, > > I'm looking to put some feelers out there and see what people are > doing to aggregate WAN customers (T1,T3, etc...) these days. What > platforms/devices are you using? What seems to be working/not working? > Any insights would be great! > > Thanks, > > Chris > > Michael Ruiz Senior Network Engineer LST Financial, Inc. Integrated Network Delivery Services, Inc. Integrated Components, Inc. Office 210-933-0212 Fax 210-892-2599 "Opportunities multiply as they are seized." - Sun Tzu

1 0

How are you aggregating WAN customers these days?
by Michael Ruiz 14 Jan '11

14 Jan '11

I know the way I used to do it at a previous company is we deployed the Cisco 12000 series router with the CHOC12-DS1-IR-SC module so we can 336 T1 out of that puppy. The only down side is there is a limitation on the number of channel groups. If doing something other than just handing off full T1 circuits, i.e. channelized T1s, then that is where you run into the problem. Sorry I do not remember what the magic number is but it something like 360 channel groups. The price on those cards can been pretty steep at times, not counting the OC12 card you have to get for the DACS(usually those cards have LR type interface, so have to pad the laser, assuming you have your DACS J) If you do not care about QOS those cards are great. If you don't mind doing COS, which can be a little challenging of getting them setup for it, work ok. If you want to more fancier with QOS, now you have to move to the Engine 5 cards which cost some bucks. At this new company we use old faith full, Cisco 7206 VXR routers with the PA-MC2T3+ cards. Since they have come down a lot in price you can really load up the chassis with those cards. DS-3 cards for a DACS is fairly inexpensive (depending on the type of DACS you have). In short, if you have your own transport equipment, then really comes down to the interfaces cards, connection type, labor and time. I hope that helps. > Hello, > > I'm looking to put some feelers out there and see what people are > doing to aggregate WAN customers (T1,T3, etc...) these days. What > platforms/devices are you using? What seems to be working/not working? > Any insights would be great! > > Thanks, > > Chris M.A.R

1 0

Is Cisco equpiment de facto for you?
by Michael Ruiz 14 Jan '11

14 Jan '11

I know where I have worked we have had a mixture of Juniper and Cisco equipment. Personally buying a Juniper Router like a M or a T series is like buying a Ferrari. I like Cisco personally and they are cheaper than buying a Juniper. For example a M-series is always going to cost some bucks after you factor the FPC and the PICS that need to be loaded. Personally I like the JUNOS system better than the Cisco IOS, it is more tech friendly when troubleshooting issues. I have not worked on the new IOS-NX system, but if I understand it correctly it is modular. If Cisco can the really cool Monitor command and the structure the command tree like a Juniper. I would think Cisco did something totally right. M.A.R

11 17

Call for Papers: RAID'11
by Guofei Gu 13 Jan '11

13 Jan '11

Dear colleagues, please find below the Call for Papers for RAID'11 (http://raid2011.org/) Apologies for multiple copies of this announcement. Best regards, Guofei Gu Assistant Professor Department of Computer Science & Engineering Texas A&M University -------------------------------------------------------------------------- CALL FOR PAPERS RAID 2011 14th International Symposium on Recent Advances in Intrusion Detection September 20-21, 2011 SRI International, Menlo Park, CA http://raid2011.org -------------------------------------------------------------------------- This symposium, the 14th in an annual series, brings together leading researchers and practitioners from academia, government, and industry to discuss issues and technologies related to intrusion detection and defense. The Recent Advances in Intrusion Detection (RAID) International Symposium series furthers advances in intrusion defense by promoting the exchange of ideas in a broad range of topics. As in previous years, all topics related to intrusion detection, prevention and defense systems and technologies are within scope, including but not limited to the following: * Network and host intrusion detection and prevention * Anomaly and specification-based approaches * IDS cooperation and event correlation * Malware prevention, detection, analysis, containment * Web application security * Insider attack detection * Intrusion response, tolerance, and self-protection * Operational experiences with current approaches * Intrusion detection assessment and benchmarking * Attacks against intrusion detection systems * Formal models, analysis, and standards * Deception systems and honeypots * Vulnerability analysis and forensics * Adversarial machine learning for security * Visualization techniques * High-performance intrusion detection * Legal, social, and privacy issues * Network exfiltration detection * Botnet analysis, detection, and mitigation * Cyber-physical systems Important Dates --------------- Paper submission deadline: Mar 31, 2011 (11:59PM PST) Paper acceptance or rejection: June 2, 2011 Final camera-ready copy: June 16, 2011 Poster submission: June 18, 2011 (11:59PM PST) Poster acceptance or rejection: June 25, 2011 Early Bird registration closes August 1, 2011 Types of Submissions -------------------- * Full papers presenting mature research results or convincing case studies of protecting large operational networks. Papers accepted by the Program Committee will be presented at RAID 2011 and included in the Symposium’s proceedings published by Springer in its Lecture Notes in Computer Science series. Papers must include an abstract and a list of keywords, and must not exceed 20 pages in total length, formatted in LNCS-style and including the bibliography and any appendices. * Posters describing a work in progress or an innovative idea not yet sufficiently mature for a full paper. Posters are submitted for review in the form of an extended abstract that must likewise be formatted in LNCS-style and not exceed 2 pages in length. Accepted posters will be presented at RAID 2011 in a separate session, and the submitted abstracts will be published on the Symposium’s web site. All submissions (papers and poster abstracts) must be formatted according to the instructions provided by Springer (http://www.springer.com/comp/lncs/Authors.html) and then submitted electronically; details will be provided on the conference web site. Papers must list all authors and their affiliations; RAID does not require anonymized submissions. For accepted papers, at least one of the authors must attend the conference to present the paper. Further questions on the submission process may be sent to the program chairs. Submissions must not substantially duplicate work that has already been published elsewhere or is submitted in parallel to a journal or to any other conference or workshop with proceedings. Simultaneous submission of the same work to multiple venues, submission of previously published work, and plagiarism constitute dishonesty or fraud. RAID, like other scientific and technical conferences and journals, prohibits these practices and may, on the recommendation of the program chair, take action against authors who have committed them. Student Scholarships -------------------- RAID 2011 will offer student scholarships to reduce symposium attendance costs. Students should visit the web site (http://raid2011.org) to learn about availability of scholarships and application deadlines. Organizing Committee -------------------- General Chair: Alfonso Valdes, SRI International, US Program Chair: Robin Sommer, ICSI/LBNL, US Program Co-Chair: Davide Balzarotti, Eurecom, France Publication Chair: Gregor Maier, ICSI, US Publicity Chair: Guofei Gu, Texas A&M, US Program Committee ----------------- Michael Bailey, University of Michigan, US Elie Bursztein, Stanford University, US Juan Caballero, IMDEA Software, Spain Michael Collins, RedJack, US Manuel Costa, Microsoft Research, UK Marco Cova, University of Birmingham, UK Holger Dreger, Siemens AG, Germany Debin Gao, Singapore Management University, Singapore Jonathan Giffin, Georgia Tech, US Guofei Gu, Texas A&M, US Guillaume Hiet, Supelec, France Thorsten Holz, Ruhr-University Bochum, Germany Sotiris Ioannidis, FORTH, Greece Jaeyeon Jung, Intel Labs Seattle, US Syed Ali Khayam, Nat. Univ. of S&T (NUST), Pakistan Christian Kreibich, ICSI, US Christopher Kruegel, UC Santa Barbara, US Corrado Leita, Symantec Research, France Gregor Maier, ICSI, US Benjamin Morin, CDISS, France Phil Porras, SRI International, US William Robertson, UC Berkeley, US Anil Somayaji, Carleton University, Canada Angelos Stavrou, George Mason University, US Charles Wright, MIT Lincoln Laboratory, US Steering Committee ----------------- Chair: Marc Dacier, Eurecom, France Herve Debar, Telecom SudParis, France Deborah Frincke, Pacific Northwest National Lab, US Ming-Yuh Huang, The Boeing Company, US Somesh Jha, University of Wisconsin, US Erland Jonsson, Chalmers, Sweden Engin Kirda, Northeastern University, US Christopher Kruegel, UC Santa Barbara, US Wenke Lee, Georgia Tech, US Ludovic Me, Supelec, France Alfonso Valdes, SRI International, US Giovanni Vigna, UC Santa Barbara, US Andreas Wespi, IBM Research, Switzerland S. Felix Wu, UC Davis, US Diego Zamboni, IBM Research, Switzerland

1 0

Call for ARIN XXVII Meeting Fellowship Applicants
by ARIN 13 Jan '11

13 Jan '11

ARIN is pleased to offer a Meetings Fellowship Program to bring new voices and ideas to public policy discussions. This call is for Fellows to attend ARIN XXVII in San Juan, Puerto Rico from 10-13 April 2011. If you have never attended an ARIN meeting and are interested in participating in the program, please submit your application by 25 February. The application link, submission instructions, and a detailed description of the program can be found at: https://www.arin.net/participate/meetings/fellowship.html Three Fellows within ARIN's service region will be selected. Fellows receive financial support to attend the Public Policy and Members Meetings, and ARIN Advisory Council representatives will serve as mentors to the Fellows to help maximize their meeting experience. Individuals selected for the fellowship receive: • Free meeting registration • Round-trip economy class airfare to the meeting, booked directly by ARIN • Hotel accommodations at the venue hotel, booked directly by ARIN • A stipend to cover meals and incidental travel expenses Please contact info(a)arin.net if you have any questions concerning the program and the application process. Regards, Susan Hamlin Director, Communications and Member Services American Registry for Internet Numbers

1 0

RE: Is Cisco equpiment de facto for you?
by Scott Weeks 13 Jan '11

13 Jan '11

--- brandon.kim(a)brandontek.com wrote: From: Brandon Kim <brandon.kim(a)brandontek.com> To be fair to Cisco and maybe I'm way off here. But it seems they do come out with a way to do things first which then become a standard that they have to follow. ISL/DOT1Q HSRP/VRRP etherchannel/LACP ------------------------------------ A bit of a late response, but http://en.wikipedia.org/wiki/Multiprotocol_Label_Switching#History scott

6 6

transit providers via FLAG fiber?
by Jim Mercer 13 Jan '11

13 Jan '11

I have been asked to investigate the costs of adding transit capacity for a national ISP in the middle east/asia. they have access to a FLAG landing station. can someone provide pointers as to where to start? private emails would be good, and i'll summarize. thanx. -- Jim Mercer jim(a)reptiles.org +1 416 410-5633 You are more likely to be arrested as a terrorist than you are to be blown up by one. -- Dianora

1 0

anyone using Netgear GSM7352S-200 ?
by Eugen Leitl 13 Jan '11

13 Jan '11

This is way offtopic, but I figured this would be a good place to ask. Anyone using Netgear GSM7352S-200 in production? http://www.netgear.com/images/GSM7328Sv2_GSM7352Sv2_23Sept1018-10817.pdf I know, it's Netgear, but how badly does it blow chunks? Inquiring minds, etc. (Disclaimer: I am currently using Netgear and HP ProCurve, and thought to upgrade to Juniper, or at least ProCurve, but have severe budget issues: 6 kEUR for 2x 48-port switches).

1 0

IPv6 prefix lengths
by Richard Barnes 13 Jan '11

13 Jan '11

Hi all, What IPv6 prefix lengths are people accepting in BGP from peers/customers? My employer just got a /48 allocation from ARIN, and we're trying to figure out how to support multiple end sites out of this (probably around 10). I was thinking about assigning a /56 per site, but looking at the BGP table stats on potaroo.net [1], it looks like this is not too common (only .29% of prefixes). Thoughts? Thanks, --Richard [1] <http://bgp.potaroo.net/v6/as2.0/index.html>

12 12