- NANOG - lists.nanog.org

Juniper M series/Cisco GSR comparison
by Correll, Matthew 14 Feb '01

14 Feb '01

I'm sure I've missed something on this in the past, but I'm looking for objective sources for a comparitive analysis between Juniper's M10 and/or M20 routers and Cisco's GSR 12000 series. Specifically, I'm interested in the pros/cons of deploying each of these boxes at an AS boundary in a large service provider network. Some areas of particular interest to me include: 1. Fault Tolerance - Ability to recover from hardware component failures 2. BGP Robustness - Ability to process high levels of BGP updates without affecting forwarding performance; stability of routing code; interoperability between vendor implementations 3. CoS features - performance during congestion; results of different queueing and congestion control approaches 4. Interface performance - performance of individual line cards (OC-12 and OC-48 PoS) 5. Total system performance - aggregate switching capacity results under load I'm not looking for opinions or vendor bias - only documented testing done by reliable (and hopefully objective) sources. Thanks Matt Correll

1 0

Test on Cisco 720xVXR NSE-1
by Michael Kim 14 Feb '01

14 Feb '01

Hi! I have done some performance test on Cisco 720xVXR NSE-1 and the result I got in my test do not match with the performance test done by Cisco. Is anybody done test on 720xVXR NSE-1? /michael --

2 1

Abovenet BGP upgrade problems
by jfielding＠ixl.com 14 Feb '01

14 Feb '01

On Sunday night, Abovenet upgraded their BGP sessions and ever since then I've been receiving an incomplete BGP table. They sent a nice message telling me of the upgrade(see below) but it appears that they wiped out 10,000 networks from their BGP advertisements. The networks included www.microsoft.com, nitrous.digex.net, and a /15 client network. It's been causing problems for my network and I've had a ticket open with Abovenet for over 24 hrs. They added the networks that I complained about to their advertisement, but I don't know how to get a diffs of the 10,000 networks that I'm missing. The output from my BGP summary is... 93736 network entries and 187404 paths using 15463992 bytes of memory The output from nitrous.digex.net shows... 106558 network entries and 528694 paths using 28942878 bytes of memory Are any other Abovenet customers experiencing the same problems? Thanks, Jay Fielding iXL, Inc. Network Engineer -----Original Message----- From: Christine Jordan [mailto:cjordan@above.net] Sent: Friday, February 09, 2001 4:15 PM To: tech-contact(a)ns.above.net Subject: Network Wide Upgrades Starting Monday, February 12, 2001 Dear Valued Customer, Starting this coming weekend and continuing for several weeks, we will be implementing network-wide changes that will be of tremendous value to all of our customers moving forward. The changes will have minimal impact of our customers. Starting on Monday, February 12, 2001, we will be updating customer BGP sessions. We will start in Atlanta (ATL1), Virginia (IAD2, IAD4), New York (LGA1), Chicago (ORD1), Seattle (SEA1), Portland (PDX1) and San Jose (SJC2). Impact to our customers should be minimal on this. On Tuesday, February 13, 2001, we will continue with San Jose (SJC1) and Virginia (IAD1). As we progress, we will keep you informed of all work being done. If you have any questions regarding this technical contact, please contact our 24x7 Call Center by email at service(a)above.net or call 1-877-ISX-PERT / 1-408-350-6451. Thank you. AboveNet Communications Metromedia Fiber Network

3 2

Re: Using unallocated address space - for DoS?
by Steven M. Bellovin 14 Feb '01

14 Feb '01

In message <20010214215512.A19817(a)mail.q-linux.com>, "Miguel A.L. Paraz" writes : > >On Tue, Feb 13, 2001 at 09:47:15PM -0800, Sean Donelan wrote: >> Unfortunately this is not a unique occurance. Cable&Wireless, Sprint, >> AT&T and UUNET have all had portions of their service knocked off the >> Internet for various periods of time due to bogus announcements. Until >> other ISPs fix their policies, I can knock your network off most of the >> Internet, and there is nothing you can do to prevent it. > > >I hope this is a remote possibility, but what are the chances of someone >malicious breaking into the "right" router and blackholing the worst possible >networks? If this is done, how long till it can be remedied? You don't have to break into the "right" router; you just have to start announcing the networks in a way that your peers don't -- can't -- detect is improper. --Steve Bellovin, http://www.research.att.com/~smb

2 1

RE: Using unallocated address space
by Sean Donelan 14 Feb '01

14 Feb '01

On Tue, 13 February 2001, "Brett L. Hawn" wrote: > Here I go being silly again, but how about people take responsability for > their own networks and filter properly at their borders? All this talk of > how to enforce things is pretty meaningless when you have countless members > of NANOG itself half-assing their own networks and complaining about other > people's. Because this is only half the answer. I always filtered my announcements, was careful to register all the address blocks I used, and was very responsible for my own network. It had no effect on someone else hijacking one of my addresses and announcing it through a large ISP's route tables. I was effectively cut off the network not because of anything I did, or could control. Worse there was little I could do to fix it. I had to wait three days for the large ISP (with whom I had no direct relationship) engineer's to decide it was worth their effort to stop the source of the false announcement. Unfortunately this is not a unique occurance. Cable&Wireless, Sprint, AT&T and UUNET have all had portions of their service knocked off the Internet for various periods of time due to bogus announcements. Until other ISPs fix their policies, I can knock your network off most of the Internet, and there is nothing you can do to prevent it.

3 2

Cingular Wireless drops below 99.999
by Alan Clegg 14 Feb '01

14 Feb '01

For the second day in a row, Cingular Wireless has no service in the 919, 910, and 704 areacodes. The customer support specialist that I talked to this morning tells me that there are 48 sites down, and offered no information as to a time-to-repair. Not being a statistics major, how long do you have to be up to fix 2 days back to 99.999%? If you are trying to get in touch with me today, just don't bother. ;-) AlanC -- Clap on (clap clap) | Clap off (clap clap) | abc(a)bsdi.com NO CARRIER

2 1

Re: happy bday IGS-R
by dave o'leary 14 Feb '01

14 Feb '01

I expect that you will get an error message if you type sho ip route, since in those days, the default was IP and sho route did exactly that. dave At 12:28 AM 2/14/01 -0500, Paul Lantinga wrote: >Tonight I fired up an *old* cisco router and found that the IOS image on >it was having it's 10th bday. > >samsite#sh ver >IGS-R Software, Version 8.2(3) >Copyright (c) 1986-1991 by cisco Systems, Inc. >Compiled Tue 12-Feb-91 12:10 by mlb > >System Bootstrap, Version 4.3(2) > >samsite uptime is 2 hours, 1 minute >System restarted by power-on >Running default software > >cisco IGS (68020) processor (revision 5) with 1024K bytes of memory. >Serial Number 00200825 >1 Ethernet/IEEE 802.3 interface. >1 Serial network interface. >16K bytes of non-volatile configuration memory. >Configuration register is 0x101 > >No command line help, no command line completion, no cidr notation, no >motorcar, not a single luxury... it's primitive as can be[1]. So, does >'mlb' still work for cisco? > >-Paul Lantinga >Q9 Networks >[1] 2 points if you got the cultural reference. 10 points if you ever >worked on an IOS version older than 8.2(3).

1 0

happy bday IGS-R
by Paul Lantinga 14 Feb '01

14 Feb '01

Tonight I fired up an *old* cisco router and found that the IOS image on it was having it's 10th bday. samsite#sh ver IGS-R Software, Version 8.2(3) Copyright (c) 1986-1991 by cisco Systems, Inc. Compiled Tue 12-Feb-91 12:10 by mlb System Bootstrap, Version 4.3(2) samsite uptime is 2 hours, 1 minute System restarted by power-on Running default software cisco IGS (68020) processor (revision 5) with 1024K bytes of memory. Serial Number 00200825 1 Ethernet/IEEE 802.3 interface. 1 Serial network interface. 16K bytes of non-volatile configuration memory. Configuration register is 0x101 No command line help, no command line completion, no cidr notation, no motorcar, not a single luxury... it's primitive as can be[1]. So, does 'mlb' still work for cisco? -Paul Lantinga Q9 Networks [1] 2 points if you got the cultural reference. 10 points if you ever worked on an IOS version older than 8.2(3).

1 0

Re: Using unallocated address space
by smd＠clock.org 13 Feb '01

13 Feb '01

Other-Sean writes: | Other than making it difficult for people to figure out WHOIS using that | ASN, "yanking" an ASN's registration has little practical effect. You | can use an un-allocated ASN almost as easily as using an un-allocated | address block. Well, the hidden point here was that the registries act on behalf of the communities of ISPs who form the registries' paying customer base / membership, and there is no particular reason why they could not alert their membership to "evil doers". What is done with such an alert is of course up to each individual member/network, however I imagine several of them would set up filtering, perhaps including the ones closest to the source of the "evil doing". Obvious candidates for reportable behaviour include the use of unregistered prefixes and ASNs. In the past in the odd case where an addressing registrar asked for assistance in dealing with such a thing she or he had discovered, I was happy to provide it. Sean.

5 8

minor update to caida reverse traceroute meta-server
by k claffy 13 Feb '01

13 Feb '01

posted this last month http://www.caida.org/analysis/routing/reversetrace/ and in response to those who brought up the obvious feature we should have included, you can now search by specific as (number, NIC name, state, city). (thanks, those who encouraged us...). nb that by 'nic name' i mean the 'AS name' for e.g., 701 is 'ALTERNET' (MCI, worldcom, etc don't work unless 701 changes its registered AS nicname) uses http://netgeo.caida.org for geography information (if you haven't checked that out you should) tnx to caida's wilfred dittmer, david moore, alex ma, brad huffaker, margaret murray feedback/suggestions still welcome (holler if you know of rvtr serversor looking glasses we should add) tnx k/elves

1 0