- NANOG - lists.nanog.org

cisco digression
by Jared Mauch 12 Mar '98

12 Mar '98

Might i recommend taking this to cisco-nsp(a)iagnet.net Folks from cisco are on that list, and most of this software stuff, etc.. is better placed there. You can do this: echo subscribe cisco-nsp | mail majordomo(a)iagnet.net or do the relevant things with your mail software. - jared -- Work: jared(a)qual.net - We Make The Internet Work for Your Business 9-5pm(ET) 800 637 4424x2634 - 24x7 NOC - 800 424 3223 pgp key available via finger from jared(a)puck.nether.net

1 0

RE: Question on filter-list config with peer goups
by Steve James 12 Mar '98

12 Mar '98

Andrew, I believe its because you already have an outbound filter in place and the peer-group is only allowed a single uniform outbound filter set. Sure someone will correct me if I'm wrong :-) . If you want to do this you'll need a seperate group :( "Members of a peer group inherit all of the configuration options of the peer group. Peer group members can also be configured to override configuration options if the options do not affect outgoing updates. That is, you can only override options that are set for incoming updates." http://www.cisco.com/univercd/cc/td/doc/cisintwk/ics/icsbgp4.htm#xtocid2260… Steve -----Original Message----- From: Andrew Brown [SMTP:andrew.brown@corp.istar.ca] Sent: Thursday, March 12, 1998 5:01 PM To: nanog(a)merit.edu Subject: Question on filter-list config with peer goups Question: WHen you have a peer configured in a peer group the peering session policy is implemenated according to the peer group definition ie: <bigger>neighbor testgroup peer-group neighbor testgroup remote-as 2493 neighbor testgroup update-source Loopback0 neighbor testgroup send-community neighbor testgroup version 4 neighbor testgroup route-map mci-bbone out neighbor testgroup filter-list 70 out </bigger> <bigger>neighbor 130.200.17.250 peer-group testgroup neighbor 150.300.12.13 peer-group testgroup Why is it that when I try to remove the filter-list statement out of the peer group definition it gives me an error?? It appears you cannot assign different filter-lists to individual members of a peer-group. ie no neighbor testgroup filter-list 70 out = works OK then .. neighbor 130.200.17.250 filter-list 70 out produces this error % Invalid command for a peer-group member </bigger>I am trying to apply a different filter-list to different members of the same peer group. Can anyone offer their advice/experience greatly appreciated - I am definitly stuck here! Andrew --------------------------------><<------------------------- Andrew Brown - Internetwork Design Engineer - Service Development iSTAR internet inc Tel: (613)780-2210 250 Albert Street Fax: (613)780-6666 Ottawa, Ont, Canada K1P 6M1

1 0

Question on filter-list config with peer goups
by Andrew Brown 12 Mar '98

12 Mar '98

Question: WHen you have a peer configured in a peer group the peering session policy is implemenated according to the peer group definition ie: <bigger>neighbor testgroup peer-group neighbor testgroup remote-as 2493 neighbor testgroup update-source Loopback0 neighbor testgroup send-community neighbor testgroup version 4 neighbor testgroup route-map mci-bbone out neighbor testgroup filter-list 70 out </bigger> <bigger>neighbor 130.200.17.250 peer-group testgroup neighbor 150.300.12.13 peer-group testgroup Why is it that when I try to remove the filter-list statement out of the peer group definition it gives me an error?? It appears you cannot assign different filter-lists to individual members of a peer-group. ie no neighbor testgroup filter-list 70 out = works OK then .. neighbor 130.200.17.250 filter-list 70 out produces this error % Invalid command for a peer-group member </bigger>I am trying to apply a different filter-list to different members of the same peer group. Can anyone offer their advice/experience greatly appreciated - I am definitly stuck here! Andrew --------------------------------><<------------------------- Andrew Brown - Internetwork Design Engineer - Service Development iSTAR internet inc Tel: (613)780-2210 250 Albert Street Fax: (613)780-6666 Ottawa, Ont, Canada K1P 6M1

3 2

ios images ?
by Stuart Bryant 12 Mar '98

12 Mar '98

hi, were looking at various ios images to use so we can standardise across the network. were looking at ios version 11.2(9)P or 11.2(10)P does anyone have any warstories to share about these ? good points/bad points ? things i should be watch out for ? regards, stuart bryant stuartb(a)paradox.net.au cabinet maker/plumber paradox digital ph +61 8 9201 9201 f +61 8 9201 9200 founding member: fellowship of beer. i used to bite (tm)

11 11

Re: More smurf fun
by Scott Gifford 12 Mar '98

12 Mar '98

>Here's the latest group of smurf-able networks. Note some cool, >high-connectivity networks are on here, like Bay Networks. >At least one was still active on mae-west, if you can believe it. > [ ... ] Is there any good reason I shouldn't ask my upstream network providers to filter all packets coming in to our network with one of these source addresses? And is there any good reason this wouldn't very effectively prevent us from being a Smurf target? Thanks for any thoughts/info, ------Scott.

5 4

UUNET/Capacity
by jamie＠iagnet.net 12 Mar '98

12 Mar '98

Anyone from UUNET backbone engr. here? I need to talk with a uunet backbone engr. re: capacity at different POPs. I have a customer we're working with that is at several UUNET POPs, I need to get some info that front-line people don't have :) (Specifically, relationships inbetween UUNET pops) Pls use the reply-to here, reply private.. TIA.. -jamie -- james g.k. rishaw efnet:gavroche --> IAG/CIC/QualNet Contractor (I'd rather be hated for something I am than loved for something I'm not).

1 0

Re: MCI NOC
by Tony Li 11 Mar '98

11 Mar '98

rirving(a)onecall.net (Richard Irving) writes: > I understand they had an earthquake..... We _always_ have earthquakes. They are a daily phenomenon. The question is, do they 'count'? We haven't had an interesting one in a while. See http://www.scecdc.scec.org/recenteqs/ Tony

2 1

NetFlow Switching
by David Papp 11 Mar '98

11 Mar '98

I have been doing a lot of reading on NetFlow switching. It looks extremely interesting and I would like to run it on my 7206 for statistical purposes with respect to the nature of my traffic with regards to originating/destination ASes. >From what I understand, you need to run the FlowCollector which appears to only be available for HPUX and Sun Solaris. And then you use the FlowAnalyzer to look over the gathered data. I don't have an HPUX or Solaris box sitting around, just a bunch of BSD type systems (BSD/OS, Linux, FreeBSD, etc). Does anyone know if I can get the FlowCollector for another OS type like that or if there is some third party program that has been developed that will accept the NetFlow stats from my router? Thankx...David * David Papp | 4907-99 Street | Phone: +1.403.430.0811 * * Manager | Edmonton, AB | Fax: +1.403.431.5159 * * OA Internet Inc. | Canada, T6E 4Y1 | Email: david(a)oanet.com *

1 0

MCI NOC
by Marcelo Manta 11 Mar '98

11 Mar '98

Is anyone from MCI NOC here ? The RNP (Brazilian Research Network - AS1916) is 4 hours down (until now) and MCI didn't solve the problem yet. The support numbers have voice mailboxes full and trouble(a)mci.net didn't answer yet. -- Marcelo Manta SAGA PGP fingerprint = E3B8 ACAF 2461 E7E5 B838 01D1 3CF4 325E

3 2

Re[2]: ios images ?
by Dustin Goodwin 11 Mar '98

11 Mar '98

And the risk you take is that if your network melts TAC says your running CAA code what did you expect? BTW ISL over faste is supported in 11.2 mainline. Unfortunately HSRP on ISL is 11.3. - Dustin - ______________________________ Reply Separator _________________________________ Subject: Re: ios images ? Author: "Alex P. Rudnev" <alex(a)Relcom.EU.net> at sb-entsmtp Date: 3/11/98 8:46 PM OK. Try to get PA-E3 cards support or ISL by fast ethernet at I/O board with any IOS except 11.1(17.3)CAA ... They incorporate new equipment into 11.1(...)CAA first, not into 11.2(xx)P. On Wed, 11 Mar 1998, Dustin Goodwin wrote: > Date: Wed, 11 Mar 98 10:57:09 -0500 > From: Dustin Goodwin <dustin_goodwin(a)smb.com> > To: nanog(a)merit.edu, stuartb(a)grasshopper.paradox.net.au > Subject: Re: ios images ? > > > 11.2(12) or higher is suppose to go GD. 11.1 and 11.3 are in serious > question as far as ever reaching GD status. If you want full support > from Cisco TAC run a GD version and run the mainline. Don't run P > train or a none GD release. This will limit your in terms of hardware. > For instance the RSP4 is a 11.2P feature not 11.2 feature. That is the > safest most conservative position to take. Of course it is the least > fun in terms of new software features and new hardware. But no one > ever got fired for running a GD mainline release. > > - Dustin - > > > ______________________________ Reply Separator _________________________________ > Subject: ios images ? > Author: Stuart Bryant <stuartb(a)grasshopper.paradox.net.au> at sb-entsmtp > Date: 3/11/98 9:53 AM > > > hi, > were looking at various ios images to use so we can standardise across > the network. were looking at ios version 11.2(9)P or 11.2(10)P > > does anyone have any warstories to share about these ? good points/bad > points ? things i should be watch out for ? > > regards, > > stuart bryant stuartb(a)paradox.net.au cabinet maker/plumber > paradox digital ph +61 8 9201 9201 f +61 8 9201 9200 > founding member: fellowship of beer. > i used to bite (tm) > > > > Aleksei Roudnev, Network Operations Center, Relcom, Moscow (+7 095) 194-19-95 (Network Operations Center Hot Line),(+7 095) 239-10-10, N 13729 (pager) (+7 095) 196-72-12 (Support), (+7 095) 194-33-28 (Fax)

2 1