- NANOG - lists.nanog.org

RE: IPv6 support for com/net zones on October 19, 2004
by Hannigan, Martin 27 Oct '04

27 Oct '04

Thanks Joe, great post re the /48's, I was just about to. We're working on this. -M< -- Martin Hannigan (c) 617-388-2663 VeriSign, Inc. (w) 703-948-7018 Network Engineer IV Operations & Infrastructure hannigan(a)verisign.com > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Joe Abley > Sent: Wednesday, October 27, 2004 4:02 PM > To: Daniel Roesen > Cc: nanog(a)merit.edu > Subject: Re: IPv6 support for com/net zones on October 19, 2004 > > > > > On 27 Oct 2004, at 15:43, Daniel Roesen wrote: > > > > > On Wed, Oct 27, 2004 at 03:21:44PM -0400, Joe Abley wrote: > >> Maybe Verisign needs more (reliable) v6 transit. > > > > Something is broken in several colors here. I'm seeing AS_PATHs > > like 6830 6175 109 7018 26415 (Sprint, Cisco, AT&T, Verisign) but > > a traceroute is going straight from 6830 to AT&T and dying there > > with !P. > > > > That you have no route for A is most probably a filtering issue > > somewhere... I'm seeing it being propagated by Sprint. > > Since I mailed that, 3557 started receiving a covering /48 > for A. Maybe > there's some operational/maintenance-induced stability issues > for those > paths. > > We've had reports before of F's covering /48 (2001:500::/48) being > filtered by some people, based on the conviction that /48s > were always > bad and should never be accepted by anybody. It's possible > that this is > biting Verisign, too. > > For the record, ARIN assign critical-infrastructure /48s which it is > important to accept: > > http://www.arin.net/registration/ipv6/micro_alloc.html > > Gert Döring maintains an excellent summary of current good > practice for > v6 filtering (including cisco and JUNOS configuration examples, and > filters of various degrees of strictness) here: > > http://www.space.net/~gert/RIPE/ipv6-filters.html > > Operators who are currently blocking any prefix covered by 2001::/16 > which is longer than 32 bits are encouraged to review that page, and > fix their routers. > > > Joe >

1 0

Anyone awake at blogspot (or google)?
by Eric Brunner-Williams in Portland Maine 27 Oct '04

27 Oct '04

Oki all, Anyone know what the story is for this morning's multi-hour unscheduled down-time for blogspot? Backhoe's surround building 5? (oops, showing my age). TiA, Eric

1 0

Energy consumption vs % utilization?
by Gregory (Grisha) Trubetskoy 27 Oct '04

27 Oct '04

Sorry, this is somewhat OT. I'm looking for information on energy consumption vs percent utilization. In other words if your datacenter consumes 720 MWh per month, yet on average your servers are 98% underutilized, you are wasting a lot of energy (a hot topic these days). Does anyone here have any real data on this? Grisha

14 20

[Insight?] OutPut Drops Cisco 7206VXR
by Gyorfy, Shawn 26 Oct '04

26 Oct '04

What's up all, I have a question, maybe some have experienced this before- let me paint the picture for you first - We are running VoIP- customer's are experiencing static. I have a DS3 going for a Cisco 10k router to a Cisco 7206VXR M2T-T3+ pa Interface. As of right now, the current usage is about 5.5Mbps with an input rate of about 1425pps and output rate of 756. The Fast Ethernet is connected to an Extreme Switch. The FastE's usage right now is about 20Mbps with an input rate of 868pps and an output of 1541pps. On the FastE - we are seeing Output drops. They were at a constant interval, when we were running IOS c7200-p-mz.123-9a. As per cisco, we upgraded the IOS to c7200-p-mz.123-10 because of a possible buffer leak. Rather than just upgrading the IOS on the current box, we swapped it out to a new box and still recv output drops and Now the puppy decides to reboot every 15 minutes returning a, "System returned to ROM by bus error at PC 0x60132C44, address 0xE16E2CD at 13:38:47 UTC Tue Oct 26 2004" Questions: (a) What would be causing the output errors - can't the processor and memory handle that? (b) what is that bus error? Thanks all, shawn.

3 2

RE: [Insight?] OutPut Drops Cisco 7206VXR
by Church, Chuck 26 Oct '04

26 Oct '04

Isn't weighted fair queueing generally a bad idea on a LAN interface? Chuck Church Lead Design Engineer CCIE #8776, MCNE, MCSE Netco Government Services - Design & Implementation Team 1210 N. Parker Rd. Greenville, SC 29609 Home office: 864-335-9473 Cell: 703-819-3495 cchurch(a)netcogov.com PGP key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x4371A48D -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Gyorfy, Shawn Sent: Tuesday, October 26, 2004 10:49 AM To: 'jkreger(a)lwolenczak.net' Cc: nanog(a)merit.edu Subject: RE: [Insight?] OutPut Drops Cisco 7206VXR Yeah - we have traffic shaping: policy-map Outbound-Transmission-To-Core (We have 10) class Expedited-Forwarding-To-Core priority percent 50 class Hanover_13364_14025_37272-TS-To-Core shape average 1536000 192000 15000 class Queller_3266_3268_30989-TS-To-Core shape average 700000 87500 15000 . . . (10) FastEthernet0/0 is up, line protocol is up Hardware is DEC21140A, address is 0001.636e.1c00 (bia 0001.636e.1c00) Description: Connected to Extreme Summit48 Internet address is MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 12/255, rxload 3/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, 100BaseTX/FX ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:21, output 00:00:00, output hang never Last clearing of "show interface" counters 00:37:12 Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 5397 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/82/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 25000 kilobits/sec 5 minute input rate 1505000 bits/sec, 979 packets/sec 5 minute output rate 5084000 bits/sec, 1590 packets/sec 2028319 packets input, 434456929 bytes Received 3 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog 0 input packets with dribble condition detected 3453733 packets output, 1359654191 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out Serial2/0 is up, line protocol is up Hardware is M1T-T3+ pa Description: ny-0200 V#51HFGL605916 (DS3 to 39 Broadway POP) Internet address is MTU 4470 bytes, BW 44210 Kbit, DLY 200 usec, reliability 255/255, txload 8/255, rxload 29/255 Encapsulation PPP, LCP Open Open: CDPCP, IPCP, crc 16, loopback not set Keepalive set (10 sec) Restart-Delay is 0 secs Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters 00:37:49 Input queue: 1/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: weighted fair Output queue: 0/1000/64/0 (size/max total/threshold/drops) Conversations 0/10/256 (active/max active/max total) Reserved Conversations 0/0 (allocated/max allocated) Available Bandwidth 11052 kilobits/sec 5 minute input rate 5029000 bits/sec, 1584 packets/sec 5 minute output rate 1437000 bits/sec, 966 packets/sec 3460149 packets input, 1351120603 bytes, 0 no buffer Received 0 broadcasts, 0 runts, 0 giants, 0 throttles 0 parity 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort 2005303 packets output, 418156501 bytes, 0 underruns 0 output errors, 0 applique, 0 interface resets 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions rxLOS inactive, rxLOF inactive, rxAIS inactive txAIS inactive, rxRAI inactive, txRAI inactive -----Original Message----- From: jkreger(a)lwolenczak.net [mailto:jkreger@lwolenczak.net] Sent: Tuesday, October 26, 2004 10:55 AM To: Gyorfy, Shawn Subject: Re: [Insight?] OutPut Drops Cisco 7206VXR Do you have any rate limiting on the Ethernet interface? The bus error.. I would say let cisco just replace your gear... that dosen't sound good. How is the bandwidth usage soo different? That dosen't sound right.... -Justin On Tue, 26 Oct 2004, Gyorfy, Shawn wrote: > > What's up all, > > I have a question, maybe some have experienced this before- let me paint the > picture for you first - We are running VoIP- customer's are experiencing > static. > > I have a DS3 going for a Cisco 10k router to a Cisco 7206VXR M2T-T3+ pa > Interface. As of right now, the current usage is about 5.5Mbps with an > input rate of about 1425pps and output rate of 756. > > The Fast Ethernet is connected to an Extreme Switch. The FastE's usage > right now is about 20Mbps with an input rate of 868pps and an output of > 1541pps. > > On the FastE - we are seeing Output drops. They were at a constant > interval, when we were running IOS c7200-p-mz.123-9a. As per cisco, we > upgraded the IOS to c7200-p-mz.123-10 because of a possible buffer leak. > Rather than just upgrading the IOS on the current box, we swapped it out to > a new box and still recv output drops and Now the puppy decides to reboot > every 15 minutes returning a, "System returned to ROM by bus error at PC > 0x60132C44, address 0xE16E2CD at 13:38:47 UTC Tue Oct 26 2004" > > Questions: (a) What would be causing the output errors - can't the > processor and memory handle that? > (b) what is that bus error? > > > Thanks all, > > shawn. > > > > > >

1 0

RE: Energy consumption vs % utilization?
by Hannigan, Martin 26 Oct '04

26 Oct '04

Sure but colo's dont operate on variances of power based on CPU. They operate on committed power to cabinet i.e. 120W per cabinet etc. and the ability to cool a fully loaded facility. If you had a thousand CPU's use 1W more all at the same time it's equal to about 9.5A. 1KX2W = 20A, 1KX3W=31A, etc. etc. -- Martin Hannigan (c) 617-388-2663 VeriSign, Inc. (w) 703-948-7018 Network Engineer IV Operations & Infrastructure hannigan(a)verisign.com > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > james edwards > Sent: Tuesday, October 26, 2004 4:18 PM > To: Alex Rubenstein > Cc: nanog(a)merit.edu > Subject: Re: Energy consumption vs % utilization? > > > > > Thats an insane statement. > > > > Are you saying, "You are only wasting money on things if you aren't > > profitable" ? > > > > /action shakes head. > > No, I am not but my statement did sure sound like that was what I was > saying. > I do think it is apples or oranges comparing CPU % to total > power used and > coming up > with a wasted factor. My colo needs X amps/hour just to run > at idle, I don't > call this waste. > It is the cost of doing business. Power factor causes losses. > So you need > enough customers to cover > this and other expenses. > > I guess we need a definition of waste here. > > I would say the the heat produced by pulling all the amp/hrs > is waste. It > could be possible to harvest > this and reuse it elsewhere. > > So, just because you are profitable does not mean there is no > waste but it > also depends on how you > classify waste. Also, do the methods to avoid this waste > justify (pay for > over time) their use. > > James H. Edwards > Routing and Security Administrator > At the Santa Fe Office: Internet at Cyber Mesa > jamesh(a)cybermesa.com noc(a)cybermesa.com > http://www.cybermesa.com/ContactCM > (505) 795-7101 >

1 0

802.1x Port Security
by Eric Brown 26 Oct '04

26 Oct '04

We are trying to find a switch that will offer port security (mac address filtering to prevent a hub on a port) and 802.1x to get the machines in these scenarios onto the right vlan: Machine without a 802.1x supplicant software or the 802.1x software disabled: put them into the guest vlan Machine with 802.1x software, but the machine is not one of ours and is not authenticated: put them into the guest vlan One of our machines with 802.1x and is authenticated: put into the authenticated vlan. We've tried this with an HP 2626 with the latest OS (8.53) with both 802.1x port-access and port-security (learn modes port-access and limited-continuous) enabled, but scenario 1 fails. Has anyone had success using a guest vlan scenario when implementing 802.1x with both port-access and port-security enabled. If so what kind of switch did you use? Thanks! Eric ebrown(a)simstar.com

1 0

RE: Energy consumption vs % utilization?
by Hannigan, Martin 26 Oct '04

26 Oct '04

This is far more complicated than this. That's why I suggested the Datacenters list. A lot is determined not just by your revenue target per square foot, but cooling, your distribution, your breaker density and sizing, etc. -M< -- Martin Hannigan (c) 617-388-2663 VeriSign, Inc. (w) 703-948-7018 Network Engineer IV Operations & Infrastructure hannigan(a)verisign.com > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Nils Ketelsen > Sent: Tuesday, October 26, 2004 2:09 PM > To: nanog(a)merit.edu > Subject: Re: Energy consumption vs % utilization? > > > > On Tue, Oct 26, 2004 at 01:52:51PM -0400, Gregory (Grisha) > Trubetskoy wrote: > > > Sorry, this is somewhat OT. > > Also Sorry, but I think the question itself is completely flawed. > > > I'm looking for information on energy consumption vs > percent utilization. > > In other words if your datacenter consumes 720 MWh per > month, yet on > > average your servers are 98% underutilized, you are wasting > a lot of > > energy (a hot topic these days). Does anyone here have any > real data on > > this? > > What does 98% underutilized mean? > > What is the utilization of a device with fully built out RAM > that is used > to 100%, when the CPU is used 2% only? > > What is the utilization of a system, that uses two percent of the > memory and two percent of the available CPU time, when the policy > of the top secret organization owning this system requires, that the > application is running on a seperated machine? > > Sure many machines might be (computing power wise) able to > handle Firewalling, Routing, Webserving, Database Serving, > Mailserving and > storing accounting data, but still there might be very good reasons to > seperate these on different machines. > > If you take points like policy requirement (see above: > an application might by policy utilize a machine to 100%), > different types > of resources, failover etc. into account, you might end up > with different numbers then just looking at the CPU (and I > have the feeling that is what you did or were intending to do). > > Actually I think nobody does calculate "real" utilization, > as there are a lot of soft factors to be taken into account. > > Nils >

1 0

RE: [Insight?] OutPut Drops Cisco 7206VXR
by John Neiberger 26 Oct '04

26 Oct '04

>On the FastE - we are seeing Output drops. They were at a constant >interval, when we were running IOS c7200-p-mz.123-9a. As per cisco, we >upgraded the IOS to c7200-p-mz.123-10 because of a possible buffer leak. Have you tried using a more stable IOS, like 12.2 GD? Or are you required to use 12.3? It might be enlightening to try 12.2 to see if at least some of these issues go away, particularly the bus errors. Regards, John --

1 0

Sanvine
by Paul Bradford 26 Oct '04

26 Oct '04

Hi, is there anybody out there using Sandvine for traffic shaping.. what are the ins/outs of it? Thanks, Paul -- Paul A. Bradford Senior Network Engineer Adelphia Communications AS19548 and AS7843 Voice: 814-274-1353 AIM: llyolf

1 0