- NANOG - lists.nanog.org

Advertising rented IPv4 prefix from a different ASN.
by Andrew 05 Aug '16

05 Aug '16

Hello List, I work for a medium sized ISP. We are entering an agreement to rent some IPv4 space from a local higher education institution. Being a multi-homed ISP we would like to advertise the rented prefix from our ASN. The prefix that will be advertised is a smaller subnet from the higher educations block; they will continue to advertise the larger prefix. What is the best way to accomplish this? Is there any way of doing this without having to tunnel the traffic through the origin ASN? I feel if we just adverse the prefix it get put on a bogon list for prefix hijacking. This space is rented long term but they are not interested in reassigning the space to us. They also want to keep advertising their prefix as one contiguous block. I appreciate any insight and information. Thank you for your time, Andrew.

13 14

Host.us DDOS attack
by Robert Webb 04 Aug '16

04 Aug '16

Anyone have any additonal info on a DDOS attack hitting host.us? Woke up to no email this morning and the following from their web site: *Following an extortion attempt, HostUS is currently experiencing sustained large-scale DDOS attacks against a number of locations. The attacks were measured in one location at 300Gbps. In another location the attacks temporarily knocked out the entire metropolitan POP for a Tier-1 provider. Please be patient. We will return soon. Your understanding is appreciated. * >From my monitoring system, looks like my VPS went unavailable around 23:00 EDT last night. Robert

11 23

NFV Solution Evaluation Methodology
by Kasper Adel 04 Aug '16

04 Aug '16

Hi, I am interested in hearing the approach and thought-process that senior people on NANOG are following when presented with an NFV solution. Assuming that the exercise at hand is to consider NFV for future expansions of Firewalls and L3VPNs or stay with the existing model of what is called PNF (physical network function)...i.e : classic routers and FWs. There are a lot of factors to consider and Vendors will typically give their biased opinion, so i'm trying to get my head out of their game, to be able to think agnostically about the whole thing. 1) Product and Service/Support Cost. 2) Operation Complexity/Learning Curve. (open source products included). 3) X Factors (Those that are never listed but do bite in the back) : Quality, Integration with Classic, Migration, Usability...etc The main goal behind us exploring NFV is the promised cost-saving, so a good method to be able to do the math of whether NFV will save opex/capex or NOT is definitely needed here and i'm trying to gather guidelines from the list. I think its easier to keep this post high-level, and later dig deeper. Cheers, K

10 11

Clueful BGP from TW-Telecom/L3
by Scott Morris 03 Aug '16

03 Aug '16

Is there per chance anyone hanging on here who is clueful about BGP working with TW-Telecom and the recent integration with Level3???? I have a client that I consult with whose route is not getting sent from TW to L3 and the techs on the case are convinced we need to put different BGP communities in (both to TW link and other provider link) which of course we are putting in to satisfy them, but magically it is not working. This SHOULD be an easy thing to figure out using the Looking Glass servers within both TW and Level3, but this concept is lost on techs we are dealing with. Anyone internal there who can contact me off-list would be greatly appreciated! Scott swm(a)emanon.com

3 3

Frontier FlashWave Support contact
by Mel Beckman 03 Aug '16

03 Aug '16

Can someone from Frontier provide a CO contact for customer-prem FlashWave units? We have several in alarm, although otherwise functional, but Frontier front line support seems unable to open tickets on this gear, since it's not apparently considered CPE by Frontier. -mel beckman

1 1

Re: Brighthouse Orlando Port blocking ISAKMP
by Mallette, Edwin J 03 Aug '16

03 Aug '16

Hi Erik, We definitely do not filter UDP500 across our network. I¹m going to reach out to you directly to see if I can help figure out what¹s going on. Cheers! Ed On 7/30/16, 11:38 PM, "NANOG on behalf of Eric C. Miller" <nanog-bounces(a)nanog.org on behalf of eric(a)ericheather.com> wrote: >Hello! > >Subject says it all!!! I cannot open any IPSec tunnels, because UDP 500 >is not making it through to my Brighthouse connection. I've tried from >Level3, Cogent, and AT&T. Are there any Brighthouse engineers on that >would help me shed some light on this? > >Thank you, > >Eric

2 1

Verizon Wireless contact
by Matt Larson 03 Aug '16

03 Aug '16

Could someone from Verizon Wireless please contact me off-list? Thanks, Matt -- Matt Larson <matt.larson(a)icann.org> VP of Research Office of the CTO, ICANN +1 240 459-9562 (mobile)

1 0

Level3 (3356) to outlook.office365.com via v6?
by David Hubbard 02 Aug '16

02 Aug '16

Curious if anyone else is having issues reaching outlook.office365.com via ipv6 over Level 3? Our customers have begun reporting failures checking email, and in the ones who have had this issue, are using the mail server name outlook.office365.com and are on v6. Traceroute6 shows the traffic dying shortly into Level 3 land at 2001:1900:4:1::3d1 which is likely a Tampa-area router. Thanks, David

2 1

CenturyLink Executive
by Dennis Burgess 02 Aug '16

02 Aug '16

I have been working on a circuit outage since Monday morning, my tickets are closed, can't get ahold of anyone, no phone calls, problem not resolved, anyone from CenturyLink Executive Team could give me a call or e-mail to see if we can get these issues solved. [DennisBurgessSignature] www.linktechs.net<http://www.linktechs.net/> - 314-735-0270 x103 - dmburgess(a)linktechs.net<mailto:dmburgess@linktechs.net>

1 0

Nexus 9k, packet loss through switch on vlan without SVI
by Jeremy 02 Aug '16

02 Aug '16

Running into some weird issues with a Cisco Nexus9k. We have a Cisco 3750X pair stacked, port channel (2x 1G) to a two different blades on a Nexus9k. Isolating the links of the port channel , on one link we can consistently get 800mbps (using iperf), or the other link we consistently get ~34mbps. we have seen this across multiple 3750X stacks. The vlan we were on is just layer2 through the n9k, there are no IP addresses. We were able to (apparently) resolve this issue by creating an SVI on the n9k, with an empty config. Now, even isolating links we can get ~800mbps across the n9k, through the various 3750X stacks. I am confused why creating the SVI would have an impact on this, and why it wouldn't be consistent across both links. If the lack of SVI were at fault, I would be less surprised if it just flat out didn't work, but this partial working state feels very odd. Anyone else seen this? Thoughts? Could traffic be hitting the CPU while going across modules? This feels like quirky n9k internals... Thanks! Jeremy PS: no CRC errors found on interfaces, all looked clean

2 1