- NANOG - lists.nanog.org

RE: [SPAM] Re: Apple Catalina Appears to Introduce Massive Jitter
by p.fazio＠eggingtons.com 29 Oct '20

29 Oct '20

1 0

Join us Nov 13 for our first NANOG U Webinar!
by NANOG News 29 Oct '20

29 Oct '20

College students and educators: Please join us on Friday, November 13 for our first NANOG U Webinar! Learn from some of the brightest minds in our community, and gain a competitive edge in Internet tech without leaving home. Registration is free, and open to all. Learn More + Register Now <https://www.nanog.org/meetings/nanog-u-webinars/> Not a student or educator? Help us spread the word, and pass this info along to anyone you know who'd be interested in attending! *Upcoming Webinars* *2020* *November 13 — Career Opportunities for Network Professionals* 11am - 1pm PST / 2pm - 4pm EST Register Now <https://www.nanog.org/meetings/nanog-u-webinars/registration/> *Speakers: * Aaron Atac, Akamai Technologies Hailey Dannenbring, Amazon Kevin Epperson, Netflix Selva Srinivasan, Microsoft *Agenda: * Panel of networking professionals with a Q&A to follow. Executive Director Edward McNair will open with a discussion on NANOG. *2021* *January 22 — DNS Fundamentals* 11am - 1pm PST / 2pm - 4pm EST *Speaker:* Eddy Winstead, Internet Systems Consortium (ISC) *February 26 — BGP Fundamentals* 11am - 1pm PST / 2pm - 4pm EST *Speaker:* Aaron Atac, Akamai Technologies *Partner with us to empower and inspire.* A NANOG Outreach partnership provides your organization a way to directly support the communities who need access to our tools and resources most, and the opportunity to inspire and connect with the next generation of networking professionals. In turn, we’ll publicly recognize your contributions as a partner in meaningful ways that resonate with the communities we serve. Interested in collaborating with us? Connect with Shawn Winstead <swinstead(a)nanog.org>, NANOG's Business Development Specialist, to start a conversation + learn more.

1 0

Data Center Address
by Rod Beck 28 Oct '20

28 Oct '20

Can anyone familiar with SG2 Equinix tell me if that is where the trading engine for the Singapore Stock Exchange is located? Roderick Beck VP of Business Development United Cable Company www.unitedcablecompany.com<http://www.unitedcablecompany.com> New York City & Budapest rod.beck(a)unitedcablecompany.com Budapest: 36-70-605-5144 NJ: 908-452-8183 [1467221477350_image005.png]

1 0

dfw equinix back door
by Randy Bush 27 Oct '20

27 Oct '20

would love to get to our racks through a back door through equnix exchange in the informart. our router is at ipv4 address 206.223.118.94 255.255.254.0 ipv6 address 2001:504:0:5::4128:1/64 asn 4128 thanks! randy

1 1

cheap MPLS router recommendations
by adamv0025＠netconsultings.com 27 Oct '20

27 Oct '20

Hi folks, I'm looking for recommendations on a cheap MPLS router (L3VPNs RSVP-TE and BFD). Around 60G throughput would do , heck even 30G. Few 1/10G ports. But netconf yang is almost a must. You know something like asr920 or juniper equivalent, but something that that is not EoS or EoL Oh and something not from China (you know, bad PR). Any pointers much appreciated. adam

14 23

AWS using 169.254.0.0/30 for ptp VPNs.
by B F 26 Oct '20

26 Oct '20

Hello all, Looking for any fresh experience with this: https://docs.aws.amazon.com/vpn/latest/s2svpn/VPNTunnels.html Any problems experienced with using that reserved space as a non-local destination? Seems like it might not be wise WRT RFC3927.Apparently space from RFC1918 is not an option.Found a few hits in the archives (2012) but looking recent experience. Thank you very much in advance.Blake

2 1

Anyone from AS6079 able to reach out off list?
by Neil Hanlon 26 Oct '20

26 Oct '20

Happy Monday, folks Having some trouble with some customer traffic taking a seemingly-'scenic' route on its way to/from us. Customer is in Massachusetts, we're in Massachusetts.. But if I'm reading these traceroutes correctly, the traffic is going down to NYIIX and meeting between AS6079 and our transit. Best, Neil

1 0

Disney+ geolocation error for 213.134.224.0/19
by Sander Steffann 25 Oct '20

25 Oct '20

Hi, Anybody around from Disney+? my main customer (Solcon) is an ISP in the Netherlands. One of our ranges is 213.134.224.0/19 and it seems to be classified as non-Netherlands. The official support channel doesn't get any further than "you must be using a VPN" even though we are the ISP and it's our own address space... Any assistance would be much appreciated! Cheers, Sander

4 4

Weekly Routing Table Report
by cscora＠apnic.net 23 Oct '20

23 Oct '20

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 24 Oct, 2020 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 828025 Prefixes after maximum aggregation (per Origin AS): 316348 Deaggregation factor: 2.62 Unique aggregates announced (without unneeded subnets): 396422 Total ASes present in the Internet Routing Table: 69762 Prefixes per ASN: 11.87 Origin-only ASes present in the Internet Routing Table: 59964 Origin ASes announcing only one prefix: 24824 Transit ASes present in the Internet Routing Table: 9798 Transit-only ASes present in the Internet Routing Table: 296 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 30 Max AS path prepend of ASN ( 45582) 27 Prefixes from unregistered ASNs in the Routing Table: 1002 Number of instances of unregistered ASNs: 1003 Number of 32-bit ASNs allocated by the RIRs: 33909 Number of 32-bit ASNs visible in the Routing Table: 28082 Prefixes from 32-bit ASNs in the Routing Table: 128197 Number of bogon 32-bit ASNs visible in the Routing Table: 15 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 520 Number of addresses announced to Internet: 2863361280 Equivalent to 170 /8s, 171 /16s and 109 /24s Percentage of available address space announced: 77.3 Percentage of allocated address space announced: 77.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 279446 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 216055 Total APNIC prefixes after maximum aggregation: 63455 APNIC Deaggregation factor: 3.40 Prefixes being announced from the APNIC address blocks: 211698 Unique aggregates announced from the APNIC address blocks: 86605 APNIC Region origin ASes present in the Internet Routing Table: 10974 APNIC Prefixes per ASN: 19.29 APNIC Region origin ASes announcing only one prefix: 3095 APNIC Region transit ASes present in the Internet Routing Table: 1596 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 30 Number of APNIC region 32-bit ASNs visible in the Routing Table: 6091 Number of APNIC addresses announced to Internet: 778992000 Equivalent to 46 /8s, 110 /16s and 121 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 241575 Total ARIN prefixes after maximum aggregation: 111414 ARIN Deaggregation factor: 2.17 Prefixes being announced from the ARIN address blocks: 239490 Unique aggregates announced from the ARIN address blocks: 114834 ARIN Region origin ASes present in the Internet Routing Table: 18649 ARIN Prefixes per ASN: 12.84 ARIN Region origin ASes announcing only one prefix: 6801 ARIN Region transit ASes present in the Internet Routing Table: 1908 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 3501 Number of ARIN addresses announced to Internet: 1091743488 Equivalent to 65 /8s, 18 /16s and 175 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 233497 Total RIPE prefixes after maximum aggregation: 110079 RIPE Deaggregation factor: 2.12 Prefixes being announced from the RIPE address blocks: 229475 Unique aggregates announced from the RIPE address blocks: 136482 RIPE Region origin ASes present in the Internet Routing Table: 27462 RIPE Prefixes per ASN: 8.36 RIPE Region origin ASes announcing only one prefix: 11822 RIPE Region transit ASes present in the Internet Routing Table: 3880 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 9605 Number of RIPE addresses announced to Internet: 709249408 Equivalent to 42 /8s, 70 /16s and 73 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 111766 Total LACNIC prefixes after maximum aggregation: 25934 LACNIC Deaggregation factor: 4.31 Prefixes being announced from the LACNIC address blocks: 112956 Unique aggregates announced from the LACNIC address blocks: 48007 LACNIC Region origin ASes present in the Internet Routing Table: 10572 LACNIC Prefixes per ASN: 10.68 LACNIC Region origin ASes announcing only one prefix: 2621 LACNIC Region transit ASes present in the Internet Routing Table: 1967 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8159 Number of LACNIC addresses announced to Internet: 174292224 Equivalent to 10 /8s, 99 /16s and 125 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 24128 Total AfriNIC prefixes after maximum aggregation: 4718 AfriNIC Deaggregation factor: 5.11 Prefixes being announced from the AfriNIC address blocks: 33886 Unique aggregates announced from the AfriNIC address blocks: 10064 AfriNIC Region origin ASes present in the Internet Routing Table: 1404 AfriNIC Prefixes per ASN: 24.14 AfriNIC Region origin ASes announcing only one prefix: 484 AfriNIC Region transit ASes present in the Internet Routing Table: 291 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 29 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 726 Number of AfriNIC addresses announced to Internet: 108614912 Equivalent to 6 /8s, 121 /16s and 85 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 5705 775 679 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4747 4192 73 ERX-CERNET-BKB China Education and Rese 7552 3582 1330 21 VIETEL-AS-AP Viettel Group, VN 45899 3260 1896 51 VNPT-AS-VN VNPT Corp, VN 7713 2712 829 618 TELKOMNET-AS-AP PT Telekomunikasi Indon 9808 2560 9044 57 CMNET-GD Guangdong Mobile Communication 4766 2351 11103 554 KIXS-AS-KR Korea Telecom, KR 9498 2303 450 231 BBIL-AP BHARTI Airtel Ltd., IN 4755 2142 441 191 TATACOMM-AS TATA Communications formerl 9394 2044 4914 18 CTTNET China TieTong Telecommunications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 11492 4637 310 782 CABLEONE, US 16509 4370 8635 2006 AMAZON-02, US 7155 4034 264 32 VIASAT-SP-BACKBONE, US 22773 3675 2992 189 ASN-CXA-ALL-CCI-22773-RDC, US 6327 3352 1323 81 SHAW, CA 16625 3135 1658 2249 AKAMAI-AS, US 209 2519 5060 519 CENTURYLINK-US-LEGACY-QWEST, US 30036 2466 366 151 MEDIACOM-ENTERPRISE-BUSINESS, US 26484 2367 148 303 IKGUL-26484, US 5650 2312 2981 1625 FRONTIER-FRTR, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6231 1636 141 UNI2-AS, ES 39891 3652 203 21 ALJAWWALSTC-AS, SA 8551 3489 379 45 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 3244 3201 540 AKAMAI-ASN1, EU 12389 2808 2279 877 ROSTELECOM-AS, RU 47331 2372 406 1797 TTNET, TR 34984 2192 355 573 TELLCOM-AS, TR 9009 2172 226 1180 M247, GB 13188 1610 100 31 TRIOLAN, UA 61317 1340 156 595 ASDETUK http://www.heficed.com, GB Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8078 3328 602 Uninet S.A. de C.V., MX 10620 3397 530 528 Telmex Colombia S.A., CO 11830 2563 369 63 Instituto Costarricense de Electricidad 6503 1594 322 446 Axtel, S.A.B. de C.V., MX 7303 1480 952 266 Telecom Argentina S.A., AR 13999 1475 449 384 Mega Cable, S.A. de C.V., MX 28573 1336 2256 222 CLARO S.A., BR 3816 1161 575 167 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 6147 1149 379 39 Telefonica del Peru S.A.A., PE 11664 1010 213 413 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1571 393 22 LINKdotNET-AS, EG 36992 1200 1528 129 ETISALAT-MISR, EG 24835 1115 466 29 RAYA-AS, EG 36903 918 480 94 MT-MPLS, MA 29571 700 68 12 ORANGE-COTE-IVOIRE, CI 6713 553 1863 34 IAM-AS, MA 15399 491 46 15 WANANCHI-, KE 37342 476 32 1 MOVITEL, MZ 36935 446 519 37 Vodafone-, EG 36914 348 82 3 KENET-AS, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8078 3328 602 Uninet S.A. de C.V., MX 12479 6231 1636 141 UNI2-AS, ES 7545 5705 775 679 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4747 4192 73 ERX-CERNET-BKB China Education and Rese 11492 4637 310 782 CABLEONE, US 16509 4370 8635 2006 AMAZON-02, US 7155 4034 264 32 VIASAT-SP-BACKBONE, US 22773 3675 2992 189 ASN-CXA-ALL-CCI-22773-RDC, US 39891 3652 203 21 ALJAWWALSTC-AS, SA 7552 3582 1330 21 VIETEL-AS-AP Viettel Group, VN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 12479 6231 6090 UNI2-AS, ES 7545 5705 5026 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4747 4674 ERX-CERNET-BKB China Education and Research Net 7155 4034 4002 VIASAT-SP-BACKBONE, US 11492 4637 3855 CABLEONE, US 39891 3652 3631 ALJAWWALSTC-AS, SA 7552 3582 3561 VIETEL-AS-AP Viettel Group, VN 22773 3675 3486 ASN-CXA-ALL-CCI-22773-RDC, US 8551 3489 3444 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 6327 3352 3271 SHAW, CA Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 174 COGENT-174, US 32985 UNALLOCATED 8.28.31.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 46766 UNALLOCATED 8.44.208.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 46505 UNALLOCATED 12.7.131.0/24 7018 ATT-INTERNET4, US 15132 UNALLOCATED 12.9.150.0/24 1239 SPRINTLINK, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED Transit: 11426 TWC-11426-CAROLINAS, US 23.142.80.0/24 Origin: 397294 UNASSIGNED Transit: 398559 TUNBROKER, US 23.157.0.0/24 Origin: 395101 UNASSIGNED Transit: 33657 CMCS, US 27.100.7.0/24 Origin: 56096 UNASSIGNED Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:9 /9:13 /10:40 /11:101 /12:291 /13:579 /14:1171 /15:1937 /16:13471 /17:8283 /18:14022 /19:25667 /20:41173 /21:50071 /22:102682 /23:86749 /24:480488 /25:1278 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5197 6231 UNI2-AS, ES 11492 3743 4637 CABLEONE, US 6327 3150 3352 SHAW, CA 7155 3122 4034 VIASAT-SP-BACKBONE, US 8551 2948 3489 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2836 3675 ASN-CXA-ALL-CCI-22773-RDC, US 8151 2812 8078 Uninet S.A. de C.V., MX 39891 2801 3652 ALJAWWALSTC-AS, SA 30036 2209 2466 MEDIACOM-ENTERPRISE-BUSINESS, US 5650 1995 2312 FRONTIER-FRTR, US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1639 2:1150 3:33 4:19 5:3605 6:54 8:1489 9:1 11:1 12:1770 13:345 14:2352 15:72 16:10 17:303 18:90 20:111 23:4057 24:2338 25:2 27:2325 31:2155 32:114 34:1 35:43 36:1002 37:3494 38:1897 39:466 40:150 41:3826 42:611 43:2144 44:222 45:14835 46:3570 47:320 49:1570 50:1669 51:93 52:1117 54:222 55:698 56:6 57:53 58:1609 59:1161 60:805 61:2326 62:2194 63:2011 64:5292 65:2377 66:5104 67:2901 68:1166 69:4081 70:1398 71:676 72:3010 74:2544 75:1456 76:683 77:1977 78:2136 79:2688 80:2050 81:1627 82:1313 83:1159 84:1254 85:2807 86:622 87:1814 88:1456 89:2880 90:382 91:7167 92:1582 93:2514 94:2837 95:3640 96:1236 97:341 98:953 99:981 100:87 101:1021 102:1136 103:24677 104:3601 105:355 106:914 107:2115 108:696 109:3740 110:1985 111:2366 112:1692 113:1494 114:1529 115:1840 116:1826 117:2111 118:2191 119:1757 120:871 121:1045 122:2316 123:2079 124:1619 125:2142 128:1341 129:1245 130:741 131:1926 132:751 133:312 134:1369 135:329 136:654 137:889 138:2320 139:1121 140:757 141:1107 142:981 143:1224 144:1141 145:353 146:1373 147:1241 148:2165 149:1209 150:762 151:1328 152:1565 153:437 154:3300 155:1211 156:2495 157:1114 158:886 159:2019 160:1989 161:1079 162:3192 163:910 164:1524 165:1304 166:594 167:1680 168:3554 169:620 170:4391 171:770 172:1998 173:2900 174:969 175:1047 176:2746 177:4287 178:2760 179:1881 180:2260 181:2559 182:3178 183:1458 184:2437 185:17169 186:3979 187:3029 188:3246 189:2702 190:9094 191:1479 192:10567 193:7750 194:6345 195:4556 196:3162 197:2186 198:6039 199:5934 200:7334 201:5282 202:10535 203:10205 204:4634 205:3098 206:3212 207:3260 208:3986 209:4505 210:4213 211:2080 212:3528 213:3279 214:1187 215:60 216:6092 217:2472 218:852 219:619 220:2061 221:916 222:973 223:1656 End of report

1 0

Configuring of MACsec for three EX4300 Switches
by switch999＠tutanota.com 23 Oct '20

23 Oct '20

Hi, following only the required configuration of https://www.juniper.net/documentation/en_US/junos/topics/task/configuration… for # Configuring MACsec Using Static Connectivity Association Key (CAK) Mode works fine for two switches, but with a third EX4300 in the middle not. Thus, could anyone please help what is required to ensure connectivity through three EX4300? Even the configuration (A; with several tries) on the outer sides switches such as e.g. given for (one port) per switch jack@cs2# set security macsec connectivity-association ca1 mka eapol-address provider-bridge jack@cs2# set security macsec connectivity-association ca1 mka eapol-address lldp-multicast jack@cs2# set protocols layer2-control mac-rewrite interface ge-0/0/13 protocol ieee8021 worked not for the three EX4300. Tunneling through a EX4200, in the middle (via vlan, snippet see below) worked fine, even without the configuration (A) at the outer sides switches, only with the most important commands given in https://www.juniper.net/documentation/en_US/junos/topics/task/configuration…. Any idea why tunneling through the middle EX4300 failed? (Used version: 17.3R3-S9.3!) Regards, Jack # PS: What is the equivalent code for EX4300 from the EX4200 code vlan-id 55; dot1q-tunneling { layer2-protocol-tunneling { all; }

1 0