- NANOG - lists.nanog.org

ISP/VPN's to China?
by ChrisSerafin 27 Oct '09

27 Oct '09

I have a client in the US looking to connect up an office in China and I'm wondering what type of connections are avilable and wether IPSEC VPNs can be established through the 'Great firewall of China'. I talked to a China Telcom rep in the US that says that the network congestion even in China makes VPN's difficult. From their website, I see that the majority of the country is using xDSL, or 2MB dedicated lines. Can anyone shed any light on this topic? Thanks! chris(a)chrisserafin.com

11 19

Alcatel-Lucent VPN Firewall Brick
by Jay Nakamura 26 Oct '09

26 Oct '09

Hello all, Looking for input on Alcatel-Lucent VPN Firewall Brick. I can look up spec and other published information but, as always, the devil is in the detail and you just never know what wall you run into until you actually try it so I wanted to see if anyone has used this and can point out good/bad things about this device. Our other option is Cisco IOS router right now. Are there better options than these two? If there is a better forum to post this question, my apologies. Please direct me to the right place. :) Our goal : We want to provide managed firewall/VPN for Colo/DIA customers. Our specific requirements are - Able to provide VRF/virtual router per customer since address range can overlap between customers. - Able to do client based VPN to the inside network. It could be IPSec or SSL. It has to support Vista/Win7-x64 - Able to do site to site VPN with various devices.(Cisco, - Can rate limit traffic in and out. - Control NAT per customer instance. - Stateful firewall per customer instance. - Good logging Thanks!

4 4

Colocation needed in the Chicago area (I know, second request)
by John Palmer (NANOG Acct) 26 Oct '09

26 Oct '09

Looking for 24U space 5Mbps bandwidth BGP Peer 15amps Chicago or Chicago suburbs (including Northern Indiana (Merrillville, Hammond, etc). Budget NO MORE THAN $750/month. If you know of colocation space that meets these parameters, please let me know. Sorry this is my second request, I wasn't specific on price and was getting ourageous quotes. Thanks John (promise - this is the last time).

2 1

[NANOG-announce] NANOG 47 wrap-up (and survey reminder!)
by Steve Feldman 26 Oct '09

26 Oct '09

Thanks again to everyone who attended NANOG 47 in Dearborn, or watched remotely. Arbor Networks and Merit Network were wonderful hosts, and the Program Committee and presenters combined to give us an excellent program. Special thanks also go to the ARIN staff, who worked closely with Merit and the PC to produce a successful week of meetings. A reminder to those of you who participated: please fill out the meeting survey, at http://tinyurl.com/nanog47. We depend on that information to provide you with useful and high-quality meetings. I look forward to seeing everyone again at NANOG 48 on February 21-24, 2010 in Austin, Texas. The call for presentations will be announced soon, and registration will open next week. Steve Feldman SC Chair _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Simple Change Management Tracking
by Paul Stewart 26 Oct '09

26 Oct '09

Hi folks... I'm just looking for some feedback ... we are looking for a *really* simple Change Management ticket system. All we want is a system that does the following: Technician opens ticket requesting a network level or server level change outlining the brief details, severity level and date for work to be performed. Senior technical staff/management review and approve/deny Technician completes change and records information in ticket to have it closed off. Ideal would be some kind of email notification option as well. On the surface, this seems really simple but every option (open source and commercial) wants to tie this into a MUCH larger package solution which we don't need. This is to manage approximately 6 people in a specific group of the company. Any input would be appreciated... Paul ---------------------------------------------------------------------------- "The information transmitted is intended only for the person or entity to which it is addressed and contains confidential and/or privileged material. If you received this in error, please contact the sender immediately and then destroy this transmission, including all attachments, without copying, distributing or disclosing same. Thank you."

8 13

Re: What should ISPs ASPs MSPs xSPs do?
by deleskie＠gmail.com 26 Oct '09

26 Oct '09

I always make the assumption that I'm on my own and now one will help. If they do GREAT if not, sucks to be but I'm prepared. In a perfect world we all help others, but if the people paying any givens person paycheck have other issues tasked to higher priority levels then I can blame or fault them for not helping me. -jim ------Original Message------ From: Sean Donelan To: nanog(a)nanog.org Subject: What should ISPs ASPs MSPs xSPs do? Sent: Oct 25, 2009 7:13 PM Other than the usual damned if they do, damned if they don't; is there any rough consensus about some practical things ISPs, ASPs, MSPs, xSPs (and customers/users) should do or should not do? Or is it just rough consensus what other people should do, but you'll get upset if that rough consensus stopped you from doing something? Stop stuff you don't like immediately, anytime of the day or night; but give you years to fix your stuff even if it is hurting other people's stuff. Sent from my BlackBerry device on the Rogers Wireless Network

1 0

RE: ISP port blocking practice/Free Speech
by Richard.E.Brown＠dartware.com 26 Oct '09

26 Oct '09

> > Free speech doesn't include the freedom to shout fire in a crowded theatre. > > It most certainly does! There is absolutely nothing to prevent one from > shouting "FIRE" in a crowded theatre. Actually, it doesn't. When I was on-staff at the computer center at Dartmouth, our provost also happened to be a first-amendment scholar, and he gave us an impromptu speech about the first amendment at a staff meeting :-) The US Supreme Court recognizes a couple exceptions to the broad permission to speak freely: - Shouting fire in a crowded theater is explicitly prohibited because of the obvious danger and risk of injury. - "Fighting words", that by their very utterance inflict injury or tend to incite an immediate breach of the peace". [Wikipedia] The example he gave was this: someone standing on a soapbox in Hanover NH, saying that we should storm the gates in Washington and burn the place down is just exercising their free speech rights - there's no credible *imminent* threat. However, standing there and saying that we should burn down the Town Hall could clearly be believed to be a real threat, and the government would be justified in stepping in. Rich Brown richard.e.brown(a)dartware.com Dartware, LLC http://www.dartware.com 66-7 Benning Street Telephone: 603-643-9600 West Lebanon, NH 03784-3407 Fax: 603-643-2289

5 4

Nanog Mentioned in TED Video: Jonathan Zittrain
by Israel Lopez-LISTS 26 Oct '09

26 Oct '09

Remember when youtube went down? Mr. Zittrain briefly mentions nanog during his TED talk in July 2009. http://www.ted.com/talks/jonathan_zittrain_the_web_is_a_random_act_of_kindn… Enjoy.

3 4

What should ISPs ASPs MSPs xSPs do?
by Sean Donelan 25 Oct '09

25 Oct '09

Other than the usual damned if they do, damned if they don't; is there any rough consensus about some practical things ISPs, ASPs, MSPs, xSPs (and customers/users) should do or should not do? Or is it just rough consensus what other people should do, but you'll get upset if that rough consensus stopped you from doing something? Stop stuff you don't like immediately, anytime of the day or night; but give you years to fix your stuff even if it is hurting other people's stuff.

2 1

application recommendation
by nsosoc -G- 25 Oct '09

25 Oct '09

Hey guys, I have a need for your candid opinion. I am searching for an enterprise sized application (commercial or otherwise) that can accomplish diversified network access from the inside. This is roughly the situation: A diversified very large (multinational) enterprise, consisting of a multitude of local networks. Each of the local networks provide direct hard-wired local and Internet access with our equipment to our employees. Our company has many third-party users. We would want to provide to the latter (after a secure admission session) Internet access with their own equipment through our (the same hard-wired) connection (and subsequently with our firewall services and using our corporate endpoint security), but no access to the internal/local networks. Which application would accomplish this? Appreciating your recommendations. Best, Jack Jack Ryan Network Architecture National Railway System nsosoc(a)gmail.com

1 0