- NANOG - lists.nanog.org

PPP multilink help
by Andrey Gordon 12 May '09

12 May '09

Hey folks, I'm sure to you it's peanuts, but I'm a bit puzzled (most likely because of the lack of knowledge, I bet). I'm buying an IP backbone from VNZ (presumably MPLS). I get a MLPPP hand off on all sites, so I don't do the actual labeling and switching, so I guess for practical purposes what I'm trying to say is that I have no physical control over the other side of my MLPPP links. When I transfer a large file over FTP (or CIFS, or anything else), I'd expect it to max out either one or both T1, but instead utilization on the T1s is hoovering at 70% on both and sometimes MLPPP link utilization even drops below 50%. What am I'm not gettting here? Tx, Andrey Below is a snip of my config. controller T1 0/0/0 cablelength long 0db channel-group 1 timeslots 1-24 ! controller T1 0/0/1 cablelength long 0db channel-group 1 timeslots 1-24 ! ip nbar custom rdesktop tcp 3389 ip cef ! class-map match-any VoIP match dscp ef class-map match-any interactive match protocol rdesktop match protocol telnet match protocol ssh ! policy-map QWAS class VoIP priority 100 class interactive bandwidth 500 class class-default fair-queue 4096 ! interface Multilink1 description Verizon Business MPLS Circuit ip address x.x.x.150 255.255.255.252 ip flow ingress ip nat inside ip virtual-reassembly load-interval 30 no peer neighbor-route ppp chap hostname R1 ppp multilink ppp multilink links minimum 1 ppp multilink group 1 ppp multilink fragment disable service-policy output QWAS ! interface Serial0/0/0:1 no ip address ip flow ingress encapsulation ppp load-interval 30 fair-queue 4096 256 0 ppp chap hostname R1 ppp multilink ppp multilink group 1 ! interface Serial0/0/1:1 no ip address ip flow ingress encapsulation ppp load-interval 30 fair-queue 4096 256 0 ppp chap hostname R1 ppp multilink ppp multilink group 1 ----- Andrey Gordon [andrey.gordon(a)gmail.com]

5 6

RE: two interfaces one subnet
by Skywing 12 May '09

12 May '09

Yes, similar happens to me all the time with both Windows Server 2008 and Vista with respect to 802.11 putting two interfaces on the same subnet (and LAN segment). I typically am never the wiser until I notice that a SMB connection had gone over to 802.11 first, because that associated before the wire was plugged in, causing data transfers on that connection to be much slower than on a hardline. This is something that happens every day to a great many laptop users, I'd wager. Certainly not by any means up there in "does not work at all, period / incompatible with networking" land, as, at the very least, emperical evidence has a quite different story to say. - S -----Original Message----- From: Chris Adams <cmadams(a)hiwaay.net> Sent: Monday, May 11, 2009 16:29 To: nanog(a)nanog.org <nanog(a)nanog.org> Subject: Re: two interfaces one subnet Once upon a time, Kevin Oberman <oberman(a)es.net> said: > > From: Chris Meidinger <cmeidinger(a)sendmail.com> > > For example, eth0 is 10.0.0.1/24 and eth1 is 10.0.0.2/24, nothing like > > bonding going on. The customers usually have the idea of running one > > interface for administration and another for production (which is a > > _good_ idea) but they want to do it in the same subnet (not such a > > good idea...) > > This will not work right. One interface can be 10.0.0.1/24, but any > added interfaces would need to be /32 (10.0.0.2/32). I don't know which OS(es) you are using, but that's not true in Linux. I see this all the time at home; if I plug my notebook into the wired LAN and still have the wireless enabled, both will get an IP (in the same subnet) from DHCP. The wired link is the preferred default route by default, but you can easily set up routes for some networks via the wireless link. You can also set up multipath routing to send packets out both links. I think you can also use IP policy routing to control the choice of outbound interface by rule (e.g. based on source address). -- Chris Adams <cmadams(a)hiwaay.net> Systems and Network Administrator - HiWAAY Internet Services I don't speak for anybody but myself - that's enough trouble.

1 0

Speaking of weird ASPATHs
by Jason Lewis 11 May '09

11 May '09

I started seeing these on May 8th. * 95.87.192.0/18 3257 9070 43561 {196738} * 8928 9070 43561 {196738} *> 8928 9070 43561 {196738} * 1273 9050 8866 43561 {196738} * 6762 8400 8866 43561 {196738}

2 1

need help in bandwidth
by Deric Kwok 11 May '09

11 May '09

Hi all Any better ways to contr ol the bandwidth? and how? eg: in hardware : switch, router or software: iptables...tc, access-list Thank you for your help

1 0

host.net contact person
by Tom Wright 11 May '09

11 May '09

Hi - I'm trying to resolve an IRRD mirroring issue. The contact e-mail "db-admin(a)rr.host.net" bounces. http://rr.host.net/help-mirroring.html Does anyone have the correct address or the details of someone at host.net who could give me a hand? Thanks! -- Kind Regards, Tom Wright Internode Network Operations P: +61 8 8228 2999 W: http://www.internode.on.net

1 0

webpage doesn't worok from specific address
by Juraj Benak 11 May '09

11 May '09

Hi everyone, I've got very unique (at least I think) problem. I have a webpage hosted on fatcow.com -> www.langports.fatcow.com <http://www.langports.fatcow.com/> The problem is that I can't access it from my computer! I'm working in an English language college and we have 2 separated networks - one for staff and the other one for students. I'm able to connect to the webpage from student's network but not from the staff's. I contacted fatcow support, they checked it from their end everything seems all right so they told me to contact my ISP. I contacted Telstra which is managing our both connections; they checked it from their end and say there is nothing wrong, they don't block anything and I should again contact fatcow. I got as well different results from tracert - 2 more hops while going through student's network (the one that works). Do you have any idea what could be wrong? I'm using Fortigate A100 as router and there has been no change last few months. Could you please advise me what program should I use to find out exactly where the problem occurs and what is the cause? Firefow return this message: Connection Interrupted. The document contains no data. The network link was interrupted while negotiating a connection. Please try again. Thanks, Juraj

2 1

RE: webpage doesn't worok from specific address
by Juraj Benak 11 May '09

11 May '09

Hi Dave, Yes I did check it by IP address. Internal DNS - no changes at all. All other webpages work without any problem so I'm sure it can't be DNS. I tried ping on langports.fatcow.com from the Fortigate and there is no response either... -----Original Message----- From: Dave Larter [mailto:dave@stayonline.com] Sent: Monday, 11 May 2009 10:29 AM To: Juraj Benak Subject: RE: webpage doesn't worok from specific address Links work for me on the outside, maybe internal DNS? Have you checked by IP? Hosts if a Win env? -----Original Message----- From: Juraj Benak [mailto:jb@langports.com] Sent: Sunday, May 10, 2009 8:23 PM To: nanog(a)nanog.org Subject: webpage doesn't worok from specific address Hi everyone, I've got very unique (at least I think) problem. I have a webpage hosted on fatcow.com -> www.langports.fatcow.com <http://www.langports.fatcow.com/> The problem is that I can't access it from my computer! I'm working in an English language college and we have 2 separated networks - one for staff and the other one for students. I'm able to connect to the webpage from student's network but not from the staff's. I contacted fatcow support, they checked it from their end everything seems all right so they told me to contact my ISP. I contacted Telstra which is managing our both connections; they checked it from their end and say there is nothing wrong, they don't block anything and I should again contact fatcow. I got as well different results from tracert - 2 more hops while going through student's network (the one that works). Do you have any idea what could be wrong? I'm using Fortigate A100 as router and there has been no change last few months. Could you please advise me what program should I use to find out exactly where the problem occurs and what is the cause? Firefow return this message: Connection Interrupted. The document contains no data. The network link was interrupted while negotiating a connection. Please try again. Thanks, Juraj __________ Information from ESET NOD32 Antivirus, version of virus signature database 4063 (20090508) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __________ Information from ESET NOD32 Antivirus, version of virus signature database 4063 (20090508) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

1 0

ASPATH Loop
by yangyang. wang 10 May '09

10 May '09

Hi， NANOG： When I was analyzing the BGP RIB data from RouteViews, I found that there were aspath loop in many bgp rib entries. For example, in the file rib.wide.20090301.0319, the peer 202.249.2.169 in AS2497 observed the following aspaths: 3130 29283 3130 2914 2497 3130 7337 3130 2914 2497 3130 34486 3130 2914 2497 3130 38001 3130 2914 2497 3130 13977 3130 2914 2497 3130 25147 3130 2914 2497 3130 5433 3130 2914 2497 3130 26164 3130 2914 2497 3130 34026 3130 2914 2497 3130 31535 3130 2914 2497 3130 14363 3130 2914 2497 3130 29648 3130 2914 2497 3130 27582 3130 2914 2497 3130 39737 3130 2914 2497 3130 33796 3130 2914 2497 3130 15108 3130 2914 2497 3130 9600 3130 2914 2497 ...... As we know, BGP instance running on routers don't allow loop in ASPATH, why they can be seen in RIBs? It's some particular technical configuration in practice? OR What's wrong with AS3130?? Thanks Yangyang

3 3

[quagga-users 10587] bgpd crash - apologies (fwd)
by Ingo Flaschberger 09 May '09

09 May '09

---------- Forwarded message ---------- Date: Mon, 04 May 2009 00:38:54 +0300 From: Geert Jan de Groot <GeertJan.deGroot(a)xs4all.nl> To: quagga-users(a)lists.quagga.net Subject: [quagga-users 10587] bgpd crash - apologies Hello, I learned today that a BGP announcement for which I am the tech-c, is causing difficulties with Quagga. First of all, I apologise; it's only today that I heard about these difficulties. I arrived less than 20 hours ago in Cairo as part of a setup-team for the upcoming AfNOG-10 meeting. We will be multi-homed this time, and hence applied for (and obtained) an ASN. Per RIR-policy active since 1-1-2009, these ASNs are 32-bit ASNs so AS327686 (AS5.6) is what is used. Currently, the local host team is provisioning links etc and hence you may have seen this problem come and go. I do not know why they choose to do prepending, but suspect it has to do with ability to set policy. I have a very, very long list of things to set up for the conference but will try any of the workarounds that have been suggested to me today. At the same time, I kindly but strongly ask to implement the fix that has been posted on various lists. One of the aims of this setup is to demonstrate that 32-bit ASNs do work and people should not steer away from them, especially since the pool of 16-bit ASNs is shrinking fast. A showcase network goes a long way in this regard. I do apologise for this unexpected, undesired side-effect. This was obviously not intended, and I apologise. It was 1996 when Paul Traina, at that time with Cisco, was doing AS path prepending for the very first time. This caused an assertion error with gated, which (among others) ANS was using at that time. I did administer AS3333 back then and my gated boxes, too, did crash, so I have been "victimized" myself before. It is perhaps ironic that 12 years later I'm again involved. Again, my sincere apologies. Geert Jan _______________________________________________ Quagga-users mailing list Quagga-users(a)lists.quagga.net http://lists.quagga.net/mailman/listinfo/quagga-users

3 2

ADMIN: "UCEProtect" threads moderated.
by Simon Lyall 09 May '09

09 May '09

The thread "UCEProtect Level 3" ( and related threads ) have been moderated. We suggest using the spam-l or www.mailop.org lists to discuss Spam and DNSBLs. Simon Lyall (on behalf of) NANOG MLC -- Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ "To stay awake all night adds a day to your life" - Stilgar | eMT.

1 0