October 1997 - Test - lists.nanog.org

router monitoring
by brett watson 26 Oct '97

26 Oct '97

don't know how many people checked this out last time but you might want to see: www.vix.com/rtrmon you'll want to tailor to your tastes and needs but we use it to monitor: bgp peer state ospf adjacency state cpu utilization get/put configs for archiving we also use it to auto-login to routers expect-like so you don't have to type names/passwords. the password gunk is hidden under pgp for each user. it's very extensible and easy to add modules to monitor any number of things that might be specific to your environment. -brett

2 1

Re: OK.
by mark＠exodus.net 26 Oct '97

26 Oct '97

That is not true. You don't need to have a local user configured on the router in order to use rsh or rcp. It is only needed if you aren't doing some type of remote authentication like tacacs. I would however suggest that you avoid rsh family commands on your routers. If you do feel that it is essential to use them make sure to use tacacs and aaa acounting to log all command transactions. To not do so is to ask for trouble. Mark Tripod Exodus Communications ---- From: Jamie Rishaw <jamie(a)intuition.iagnet.net> To: Todd R. Stroup <tstroup(a)fibernet.net> Cc: cosmo(a)olywa.net; alex(a)nac.net; nanog(a)merit.edu Date: Saturday, October 25, 1997 10:21 AM Subject: Re: OK. Todd R. Stroup wrote: > > Looking at the source for the looking-glass though it doesn't use the > username option for rsh command. When useing the cisco command below > don't you have to use the rsh username? > > ip rcmd remote-host www 206.183.224.12 nobody > > I changed the ip of the $ROUTER in lg.pl to > "www\(a)ipaddress.of.router" instead of "ipaddress.of.router" > which seems to work. I kept getting Permission Denied without it. You need to make sure that in 'ip rcmd' that you have local-username defined to something that there is a 'username xxx' entry on the cisco for. In other words, if you have (sorry syntax is probably not correct): ip rcmd remote-host joebob lookingglass.yourcompany.com daemon enable you have to have a 'username joebob' entry on the cisco as well. local-username means "apply the permissions of local-username when this rsh matches" and remote-username is the userid of whatever your cgi-bin runs as.. if your web server is setuid "daemon" and cgi-bins are daemon, it will only work if you have 'daemon' as a remote-username in the ip rcmd command. HTH, -jamie -- jamie g.k. rishaw dal/efnet:gavroche __ IAGnet/CICNet/netILLINOIS Netops DID:216.902.5455 FAX:216.623.3566 \/ 800.637.4IAGx5455 "It's like im being tied to the hood of a yellow rental truck being packed in with fertilizer and fuel oil.. pushed over a cliff by a suicidal mickey mouse."

2 1

Pre-NANOG tutorial on routing on the web...
by Avi Freedman 26 Oct '97

26 Oct '97

It's not really a detailed document, but at: http://www.netaxs.net/nanog/iq/ You can find an html-icized power point presentation that should resemble somewhat my tutorial tomorrow night pre-NANOG in Phoenix. My apologies to jaw(a)op.net for not composing the presentation in perl, roff, tcl, tex, vi macros, emacs lisp, forth or something that he can easily parse. If there are any specific topics/questions that people want to be covered, or any topics for which people want diagrams inserted, let me know by e-mail and if IP is up early enough @ the hotel I'll try to throw some extra slides in. The assumption is that the viewer is somewhat familiar with basic static routing as well as basic BGP configs (info about those topics and about route announcements/"how the Internet works" can be found @ the boardwatch.com archives). Thanks, Avi

1 0

Possible topic?
by Justin W. Newton 26 Oct '97

26 Oct '97

Hi there, Is it possible, even at this late date, to allow someone from MFS to comment at NANOG on what is being done to relieve inter switch congestion at MAE East and West and what kind of time frames we can expect a resolution in? This is seriously affecting the performance of the Internet as a whole, and seems to me to be a very valid operational topic for the conference. ************************************************************** Justin W. Newton voice: +1-650-482-2840 Senior Network Architect fax: +1-650-482-2844 PRIORI NETWORKS, INC. http://www.priori.net Legislative and Policy Director, ISP/C http://www.ispc.org "The People You Know. The People You Trust." **************************************************************

17 27

mbone and realvideo
by brett watson 26 Oct '97

26 Oct '97

we're furiously working to get mbone stuff... in the mean time, we'll still tape and dump to realvideo. several folks have complained that the player only runs on windows, not true: freebsd (both dynamic and static link) mac os os/2 win95/nt solaris (2.4 and 2.5 sparc) sunos 4.1.x irix 5.3/6.2/6.3 -brett ps. i'm still open for other formats to dump to. real-stuff seems most accessible to everyone.

5 4

nanog event
by Alex Rubenstein 25 Oct '97

25 Oct '97

The Net Access crew is currently at the hotel, and in the TAPS bar, playing pool, drinking beer, and smokin cigars. Comeon down if your here.

2 1

Re: OK.
by Jay Stewart 25 Oct '97

25 Oct '97

> > I am a moron; I can't figure it out. > > How do you make a cisco so that you can rsh into it (to use Mr. Kerns > looking glass)? ip rcmd rsh-enable ip rcmd remote-host name1 205.163.58.15 name2 ----- Name1 = Name you will use on rsh command line -l switch Name2 = name of account actually logged in to the client machine. Of course the IP number is the number of the host that will be sending RSH commands. Hope this helps. Jay Stewart Vice President Olympia Networking Services - "Olympia's Premier Internet Access" Phone (360) 753.3636 Fax (360) 357.6160 http://www.olywa.net/

3 2

mbone at nanog (again)
by brett watson 24 Oct '97

24 Oct '97

i've had quite a few inquires as to why we're not mbone'ing (and a lot of responses with "good idea on real video, etc") and to be honest, we just couldn't get the proper equipment, video boards, camera's, etc to do this. if anyone here has equipment or could obtain and bring along (or ship, we can pay for that) we'd be most grateful. we have the human resources to do it and had every intention of multicasting but ran out of time on getting hardware. -brett

1 0

address blocks for nanog
by brett watson 24 Oct '97

24 Oct '97

the ip address range we'll be using is: 209.100.126.0/23 -brett

1 0

Re: Business Opportunity
by Ron Buchalski 24 Oct '97

24 Oct '97

>Date: Fri, 24 Oct 1997 10:43:22 -0700 >From: David Carmean <dlc(a)avtel.net> >To: nanog(a)merit.edu >Subject: Re: Business Opportunity > > >Looks like that remove request worked great...for the spammers. > >They've now got our number. I vote to close posting to >non-subscribers. I agree...provided that the subscription process is screened so that spammers can't sign up to the list. -rb Ron Buchalski SE, Cisco Systems ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1