- NANOG - lists.nanog.org

Re: Unable to assign an IP address to the sub-interface in Huawei S6720
by Josivan Barbosa 19 May '17

19 May '17

Hi Carlos Thank you for the response. It's not working for me: <CR03-CGE>display version Huawei Versatile Routing Platform Software VRP (R) software, Version 5.160 (S6720 V200R008C00SPC500) Copyright (C) 2000-2015 HUAWEI TECH CO., LTD HUAWEI S6720-30C-EI-24S-AC Routing Switch uptime is 36 weeks, 6 days, 3 hours, 27 minutes ES5D2S26Q002 0(Master) : uptime is 36 weeks, 6 days, 3 hours, 27 minutes 2048M bytes DDR Memory 446M bytes FLASH Pcb Version : VER.B Basic BootROM Version : 0208.0001 Compiled at Oct 13 2015, 14:15:20 BootLoad Version : 0208.0001 Compiled at Oct 24 2015, 02:02:20 CPLD Version : 0107 Software Version : VRP (R) Software, Version 5.160 (V200R008C00SPC500) CARD1 information Pcb Version : ES5D21Q04Q01 VER.A CPLD Version : 0104 PWR1 information Pcb Version : PWR VER.A PWR2 information Pcb Version : PWR VER.B FAN1 information Pcb Version : NA <CR03-CGE>system-view Enter system view, return user view with Ctrl+Z. [CR03-CGE]interface XGigabitEthernet 0/0/24 [CR03-CGE-XGigabitEthernet0/0/24]port link-type hybrid Info: This operation may take a few seconds. Please wait for a moment...done. [CR03-CGE-XGigabitEthernet0/0/24]undo port hybrid vlan 1 Info: This operation may take a few seconds. Please wait a moment...done. [CR03-CGE-XGigabitEthernet0/0/24]port hybrid tagged vlan 21 Info: This operation may take a few seconds. Please wait a moment...done. [CR03-CGE-XGigabitEthernet0/0/24]quit [CR03-CGE]interface XGigabitEthernet 0/0/24.500 [CR03-CGE-XGigabitEthernet0/0/24.500]dot1q termination vid 500 Info: This operation may take a few seconds. Please wait a moment... [CR03-CGE-XGigabitEthernet0/0/24.500]ip address 10.50.0.1 255.255.255.252 ^ Error: Unrecognized command found at '^' position. 2017-05-19 10:14 GMT-03:00 Carlos Fraga <carlos.fraga(a)adamo.es>: > Hi Josivan, > > It works for me (Huawei S6700): > > dis Ver ---> > > Huawei Versatile Routing Platform Software > VRP (R) software, Version 5.150 (S6700 V200R005C00SPC500) > Copyright (C) 2000-2015 HUAWEI TECH CO., LTD > *Quidway S6700-24-EI *Routing Switch uptime is 66 weeks, 1 day, 9 hours, > 52 minutes > > LS61S24N 0(Master) : uptime is 66 weeks, 1 day, 9 hours, 51 minutes > 512M bytes DDR Memory > 64M bytes FLASH > Pcb Version : VER.B > Basic BOOTROM Version : 186 Compiled at Jul 2 2015, 17:00:04 > CPLD Version : 261 > Software Version : VRP (R) Software, Version 5.150 (V200R005C00SPC500) > FANCARD I information > Pcb Version : FAN VER.B > PWRCARD I information > Pcb Version : PWR VER.C > PWRCARD II information > Pcb Version : PWR VER.C > FANCARD II information > Pcb Version : FAN VER.B > > > Here is my config: > > interface XGigabitEthernet0/0/16 > port link-type hybrid > undo port hybrid vlan 1 > port hybrid tagged vlan 2200 > > # > interface XGigabitEthernet0/0/16.2235 > > (x.2235 is the client vlan) > > > I hope this helps you. > > Best Regards, > > *_____________________________* > > *Carlos Fraga* > > > 2017-05-18 23:14 GMT+02:00 Josivan Barbosa <josivan.barbosa01(a)gmail.com>: > >> Hello, >> >> I follow the steps described in "8.6 Configuring a Dot1q Termination >> Sub-interface to Implement Inter-VLAN Communication" avaliable in >> http://support.huawei.com/enterprise/br/doc/DOC1000112303 >> <https://mailtrack.io/trace/link/fc674e3e7101d647339cadd84aff9e2b6ddb7e43?ur…> >> <https://mailtrack.io/trace/link/70d174e54248db9b79a7f362531 >> 20ebde91d879e?url=http%3A%2F%2Fsupport.huawei.com%2Fenterpri >> se%2Fbr%2Fdoc%2FDOC1000112303&userId=948086&signature=7608d90d5dd77e0c >> <https://mailtrack.io/trace/link/8ce339a3a7a27b490840146bd8505113dabd1635?ur…> >> > >> but dont work. Says "Error: Unrecognized command found at '^' position" >> in >> ip address command. >> >> Has anyone managed to configure sub-interface on the Huawei S6720 switch? >> >> >> -- >> Att >> >> Josivan Barbosa >> > > -- Att Josivan Barbosa

1 0

Dotster/domain.com contact
by Eric Kuhnke 19 May '17

19 May '17

I'm looking for a technical contact at dotster/domain.com to address an ongoing issue with their registrar service's lack of compliance with a very clear ICANN policy. Email me off-list.

1 0

Unable to assign an IP address to the sub-interface in Huawei S6720
by Josivan Barbosa 18 May '17

18 May '17

Hello, I follow the steps described in "8.6 Configuring a Dot1q Termination Sub-interface to Implement Inter-VLAN Communication" avaliable in http://support.huawei.com/enterprise/br/doc/DOC1000112303 <https://mailtrack.io/trace/link/70d174e54248db9b79a7f36253120ebde91d879e?ur…> but dont work. Says "Error: Unrecognized command found at '^' position" in ip address command. Has anyone managed to configure sub-interface on the Huawei S6720 switch? -- Att Josivan Barbosa

1 0

FloCon 2018 [Was: Re: vFlow :: IPFIX, sFlow and Netflow collector]
by Rachel Kartch 18 May '17

18 May '17

On May 16, 2017, at 4:40 PM, Avi Freedman <freedman(a)freedman.net> wrote: >On a related topic, I'd love to see NANOGers and general netops and perf-minded >people go to Flocon (put on by CERT, and heavily but not exclusively SiLK- and >security-focused). >Cross-pollination of interests, tools, and techniques will help us all... As a two-decades-or-so lurker on this list (since back when I was a wee thing at ATHY/NYSERNet), I’m going to finally break out of lurk mode to thank Avi for his mention of FloCon, and take advantage of this opportunity to tell you all about a conference that might be of interest. For those who aren’t familiar with it, FloCon is an annual conference organized by CERT, historically focused on network flow and flow data analysis, and particularly its use to support security. (I should note we are *not* US-CERT—we’re the CERT Division of the Software Engineering Institute, operated by Carnegie Mellon University.) I said “historically focused on network flow” above because one of the changes for 2018 is that we’re expanding the scope of FloCon. This is in response to the trend in the types of submissions we’re receiving for the conference, and in the types of work we at CERT see our sponsors (and the rest of the world) interested in. The new scope for FloCon is data analysis in support of security operations—so, all types of data now, not just flow data or network data. We still anticipate that network data analysis will be a significant part of FloCon because of its central place in security operations, but we’re hopeful that the expanded scope will allow participants to share new and exciting ways of fusing all sorts of data. (Network flow? Pcap? Passive DNS? Building access data? Incident report contents? Biometric data? Malware hashes? Bring it, whatever it is.) We tend to get a good mix of security practitioners, tool builders, and researchers each year. I would love to see more people from the ops world join us, since I think the best advances in the state of the practice will come from bringing the brains of all of these groups together. More information about the conference, including the call for participation, can be found here: https://resources.sei.cmu.edu/news-events/events/flocon/ As the chair for FloCon 2018, I’d be happy to take any questions off-list about the conference. Thanks, Rachel A. Kartch Software Engineering Institute | CERT 4500 Fifth Avenue Pittsburgh, PA 15213 rakartch(a)cert.org

1 0

Please run windows update now
by Ca By 18 May '17

18 May '17

This looks like a major worm that is going global Please run windows update as soon as possible and spread the word It may be worth also closing down ports 445 / 139 / 3389 http://www.npr.org/sections/thetwo-way/2017/05/12/528119808/large-cyber-att…

29 55

vFlow :: IPFIX, sFlow and Netflow collector
by Mehrdad Arshad Rad 17 May '17

17 May '17

Hi all, I just wanted to share the vFlow - IPFIX, sFlow and Netflow collector, it's scalable and reliable, written by pure Golang! It doesn't have any library dependency and works w/ Kafka and NSQ (you can write your own MQ plugin). https://github.com/VerizonDigital/vflow For more information https://www.linkedin.com/pulse/high-performance-scalable-reliable-ipfix-sfl… It can be able to integrate w/ MemSQL easy and you can have kind of below SQL query: memsql> select * from samples order by bytes desc limit 20; +----------------+-----------------+-----------------+--------+--------+-------+---------+---------+----------+--------+---------------------+ | device | src | dst | srcASN | dstASN | proto | srcPort | dstPort | tcpFlags | bytes | datetime | +----------------+-----------------+-----------------+--------+--------+-------+---------+---------+----------+--------+---------------------+ | 192.129.230.0 | 87.11.81.121 | 61.231.215.18 | 131780 | 21773 | 6 | 80 | 64670 | 0x10 | 342000 | 2017-04-27 22:05:55 | | 52.20.79.116 | 87.11.81.100 | 216.38.140.154 | 41171 | 7994 | 6 | 443 | 26798 | 0x18 | 283364 | 2017-04-27 22:06:00 | | 52.20.79.116 | 192.229.211.70 | 50.240.197.150 | 41171 | 33651 | 6 | 80 | 23397 | 0x10 | 216000 | 2017-04-27 22:05:55 | | 108.161.249.16 | 152.125.33.113 | 74.121.78.10 | 13768 | 9551 | 6 | 80 | 49217 | 0x18 | 196500 | 2017-04-27 22:05:59 | | 192.229.130.0 | 87.21.81.254 | 94.56.54.135 | 132780 | 21773 | 6 | 80 | 52853 | 0x18 | 165000 | 2017-04-27 22:05:55 | | 108.161.229.96 | 93.184.215.169 | 152.157.32.200 | 12768 | 11430 | 6 | 443 | 50488 | 0x18 | 86400 | 2017-04-27 22:06:01 | | 52.22.49.106 | 122.229.210.189 | 99.31.208.183 | 22171 | 8018 | 6 | 443 | 33059 | 0x18 | 73500 | 2017-04-27 22:05:55 | | 52.22.49.126 | 81.21.81.131 | 66.215.169.120 | 22171 | 20115 | 6 | 80 | 57468 | 0x10 | 66000 | 2017-04-27 22:05:59 | | 108.160.149.96 | 94.184.215.151 | 123.90.233.120 | 16768 | 14476 | 6 | 80 | 63905 | 0x18 | 65540 | 2017-04-27 22:05:57 | | 52.22.79.116 | 162.129.210.181 | 60.180.253.156 | 21271 | 31651 | 6 | 443 | 59652 | 0x18 | 64805 | 2017-04-27 22:06:00 | | 108.161.149.90 | 93.184.215.169 | 80.96.58.146 | 13868 | 22394 | 6 | 443 | 1151 | 0x18 | 59976 | 2017-04-27 22:05:54 | | 102.232.179.20 | 111.18.232.131 | 121.62.44.149 | 24658 | 4771 | 6 | 80 | 61076 | 0x10 | 59532 | 2017-04-27 22:05:54 | | 102.232.179.20 | 192.129.145.6 | 110.49.221.232 | 24658 | 4804 | 6 | 443 | 50002 | 0x10 | 58500 | 2017-04-27 22:05:55 | | 102.232.179.20 | 192.129.232.112 | 124.132.217.101 | 24658 | 43124 | 6 | 443 | 37686 | 0x10 | 57000 | 2017-04-27 22:06:00 | | 192.229.230.0 | 87.11.81.253 | 219.147.144.22 | 132380 | 2900 | 6 | 80 | 25202 | 0x18 | 56120 | 2017-04-27 22:05:58 | | 192.129.130.0 | 87.21.11.200 | 180.239.187.151 | 132380 | 8151 | 6 | 443 | 55062 | 0x18 | 52220 | 2017-04-27 22:05:59 | | 52.12.79.126 | 87.21.11.254 | 64.30.125.221 | 21071 | 14051 | 6 | 80 | 57072 | 0x10 | 51000 | 2017-04-27 22:05:54 | | 192.229.110.1 | 150.195.33.40 | 98.171.170.51 | 132980 | 28773 | 6 | 80 | 53270 | 0x18 | 51000 | 2017-04-27 22:05:57 | | 192.229.110.1 | 87.21.81.254 | 68.96.162.21 | 132980 | 28773 | 6 | 80 | 46727 | 0x18 | 49500 | 2017-04-27 22:06:01 | | 52.22.59.110 | 192.129.210.181 | 151.203.130.228 | 21271 | 12452 | 6 | 80 | 43720 | 0x18 | 49500 | 2017-04-27 22:05:55 | +----------------+-----------------+-----------------+--------+--------+-------+---------+---------+----------+--------+---------------------+ 20 rows in set (0.06 sec) Please let me know if you have any questions. Thanks, Mehrdad -- *M*ehrdad Arshad Rad *P*rincipal Software Engineer https://www.linkedin.com/in/mehrdadrad

5 6

NCS5508 for Agg/Core/Peering router
by Will Black 17 May '17

17 May '17

Is anyone using the NCS5508 as the role of a backbone Core / Aggregation / Peering router? I understand these are generally different network models but we would be interested in hearing whether anyone is using these routers for all three roles. We flattened our network during our last refresh and are trying to do more with less (who isn’t these days?), so we’re trying to determine whether the NCS5508 would fit the bill that’s currently being served by our ASR9K’s. We would also be interested in hearing general observations and thoughts about the NCS5508 for any role. Thanks, Will Black

2 1

Yahoo mail / DNS admin on the list?
by Bryan Holloway 16 May '17

16 May '17

Having an intermittent issue where Yahoo's mail-servers keep complaining about not finding MX records for a small handful of customers (and always the same customers.) Tried submitting a ticket through the postmaster web-site but haven't gotten any response. Could someone contact me off-list? It would be greatly appreciated. Thanks! - bryan

1 1

IRNOG1 Meeting
by Shahab Vahabzadeh 16 May '17

16 May '17

Hello Hello, Proudly I want to announce that 1st IRNOG Meeting will launch at 24th of May in Tehran. In the first day of public announce we had near 90 people registered to attend the meeting. Hope to find this meeting useful in Iranian Community. It would be great to get your ideas about the experiences of coordinating such a meetings. http://ir-nog.com Thanks -- Regards, Shahab Vahabzadeh, Network Engineer and System Administrator PGP Key Fingerprint = 1C43 988E 01A8 4D95 B662 9118 CD94 9F10 4DF4 6163

2 2

Carrier classification
by Matt Hoppes 16 May '17

16 May '17

Are the terms tier-1,2,3 dead terms or still valid ways to define carriers?

9 12