May 2001 - Test - lists.nanog.org

RE: terminal server recommendation
by Martin, Christian 01 May '01

01 May '01

One other thing. The Cisco 3660 can support 164 console ports with 5 of the 4x8async NMs. Needs octopus cables, but with that kind of density a patch-panel cross-connect system would be required (unless you are building out 1-RU devices). Supports all the nice Cisco features, but will cost you... chris > -----Original Message----- > From: Charles Smith [mailto:chasmith9@hotmail.com] > Sent: Tuesday, May 01, 2001 4:13 PM > To: nanog(a)merit.edu > Subject: terminal server recommendation > > > > I would like to deploy a terminal server in several of my > POPs, however cost > is a slight issue. Can anyone on the list recommend a fairly > inexpensive > terminal server (besides Cisco)? Obviously the terminal > server should be > reliable and work - it is the little things that count. > > chas > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com > >

1 0

New prefix.
by Sabri Berisha 01 May '01

01 May '01

You won't believe this :) -- /* Sabri Berisha CCNA,BOFH,+iO O.O Business Internet Trends * Join HAL!!: www.HAL2001.org ____oOo_U_oOo____ http://www.bit.nl/~sabri * ____________________________________________, +31 318648688 318643334 * DDoS: http://misterpoll.com/3517731598.html L_______________________ */ ---------- Forwarded message ---------- Return-Path: <owner-tech-l(a)AMS-IX.NET> Received: from localhost (bofh [127.0.0.1]) by bofh.bit.nl (8.11.0/8.11.0) with ESMTP id f3Q9D4c04077 for <sabri@localhost>; Thu, 26 Apr 2001 11:13:04 +0200 Received: from pomo.bit.nl [213.136.0.96] by localhost with POP3 (fetchmail-5.5.0) for sabri@localhost (single-drop); Thu, 26 Apr 2001 11:13:04 +0200 (CEST) Received: from listserv-mail.surfnet.nl (listserv-mail.surfnet.nl [192.87.5.141]) by linux.bit.nl (8.8.7/NOSPAM) with ESMTP id LAA03910; Thu, 26 Apr 2001 11:11:27 +0200 Received: from listserv-mail (listserv-mail.surfnet.nl) by listserv-mail.surfnet.nl (LSMTP for Windows NT v1.1b) with SMTP id <0.01CB1D5A(a)listserv-mail.surfnet.nl>; Thu, 26 Apr 2001 11:11:26 +0200 Received: from NIC.SURFNET.NL by NIC.SURFNET.NL (LISTSERV-TCP/IP release 1.8d) with spool id 1664209 for tech-l(a)NIC.SURFNET.NL; Thu, 26 Apr 2001 11:11:25 +0200 Received: from survis.surfnet.nl (192.87.108.3) by nic.surfnet.nl (LSMTP for Windows NT v1.1b) with SMTP id <0.FFD5FD2E(a)nic.surfnet.nl>; Thu, 26 Apr 2001 11:10:48 +0200 Received: from smtp.bevelander.nl ([213.207.0.4]) by survis.surfnet.nl with ESMTP (exPP) for tech-l(a)ams-ix.net id 14shnT-0000ED-00; Thu, 26 Apr 2001 11:10:47 +0200 Received: from beveland-tjkdtz.bevelander.nl (laptop.reinder.nl [213.207.32.35]) by smtp.bevelander.nl (8.11.3/8.11.3) with ESMTP id f3Q9AfO04766 for <tech-l(a)ams-ix.net>; Thu, 26 Apr 2001 11:10:41 +0200 X-Sender: (Unverified) X-Mailer: QUALCOMM Windows Eudora Version 4.3.1 Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Message-ID: <4.3.1.2.20010426111230.0200c298(a)s01.bevelander.nl> Date: Thu, 26 Apr 2001 11:18:07 +0200 Reply-To: "AMS-IX Discussion list for technical issues." <tech-l(a)AMS-IX.NET> Sender: "AMS-IX Discussion list for technical issues." <tech-l(a)AMS-IX.NET> From: "Bevelander Noc." <noc(a)BEVELANDER.NL> Subject: New prefix. Comments: To: Ams-ix tech list <tech-l(a)ams-ix.net> To: tech-l(a)AMS-IX.NET X-UIDL: c+b"!_Oj"!3M0"!c5'#! Dear Peers/Colleagues, We will start to announce a new prefix: AS13197 192.168.0.0/16 Please update your filters. Thanks, Reinder van Amerongen, Junior. System/Network Adminstrator and Senior Cabling consultant. Bevelander Internet Services.

5 5

Re: terminal server recommendation
by Paul Vixie 01 May '01

01 May '01

chasmith9(a)hotmail.com ("Charles Smith") writes: > I would like to deploy a terminal server in several of my POPs, however cost > is a slight issue. Can anyone on the list recommend a fairly inexpensive > terminal server (besides Cisco)? Obviously the terminal server should be > reliable and work - it is the little things that count. http://www.rocketport.com/sales/specs/rack16.htm, with pictures available at http://www.rocketport.com/sales/specs/rack16_foto.htm, will connect to any BSD or Linux machine -- which your POP already ought to have. ftp://ftp.vix.com/pub/vixie/rtty-4.0.shar.gz, when mixed with the above (or, indeed, with any serial port on any posix-like system) will give you console service including multiple simultaneous operators, audit logs, and so on. disclaimer: neither i nor my employer derives any input from giving away rtty.

1 0

Re: black hat .cn networks
by Richard A. Steenbergen 01 May '01

01 May '01

On Mon, Apr 30, 2001 at 10:18:03PM +0000, Walter Prue wrote: > > The folks in the US who counterattack might be well advised to > reconsider doing so. I would imagine that traffic from the US would > be closely monitored. Any new hacking tricks that these > counterattacks might use would then be recorded and analyzed. These > techniques could then be used by them to further attack the US. Oh for the love of god, 15 web sites get defaced and it's suddenly worth trying to deny internet access to a billion people? They watch a story on the news, and think "wouldn't it be kewl if...". Any excuse or boredom will do, and then the media blows it out of proportion because it makes for an interesting story. I bet it's probably the same number of hacks that you'd see on a normal day, just against another country's www..gov's instead of their own. -- Richard A Steenbergen <ras(a)e-gerbil.net> http://www.e-gerbil.net/ras PGP Key ID: 0x138EA177 (67 29 D7 BC E8 18 3E DA B2 46 B3 D8 14 36 FE B6)

6 7

RE: terminal server recommendation
by Roeland Meyer 01 May '01

01 May '01

http://www.cyclades.com/products/pricing/index.php#TS1000/2000 > -----Original Message----- > From: Charles Smith [mailto:chasmith9@hotmail.com] > Sent: Tuesday, May 01, 2001 1:13 PM > To: nanog(a)merit.edu > Subject: terminal server recommendation > > > > I would like to deploy a terminal server in several of my > POPs, however cost > is a slight issue. Can anyone on the list recommend a fairly > inexpensive > terminal server (besides Cisco)? Obviously the terminal > server should be > reliable and work - it is the little things that count. > > chas > _________________________________________________________________ > Get your FREE download of MSN Explorer at http://explorer.msn.com > >

1 0

Use of IPv6 /127 prefixes
by Mike Leber 01 May '01

01 May '01

I've run into an interesting question regarding the widespread practice of using /127 prefixes under IPv6. I'm posting this to nanog instead of 6bone because I want to ask nanog IPv6 people. Allocating a /127 is a common convention under IPv6 to provide globally routable addresses for a point to point connection, such as a tunnel. Many tunnel brokers use it, etc. I know that its use is widespread on the links between cisco routers at the core the IPv6 Internet without obvious trouble. However, it would appear to be in conflict with anycast addresses (btw, anycast addresses are not the same as IPv4 broadcast addresses). RFC 2373 section 2.6.1 regarding "Required Anycast Address": The "subnet prefix" in an anycast address is the prefix which identifies a specific link. This anycast address is syntactically the same as a unicast address for an interface on the link with the interface identifier set to zero. Packets sent to the Subnet-Router anycast address will be delivered to one router on the subnet. All routers are required to support the Subnet-Router anycast addresses for the subnets which they have interfaces. So what is anycast used for? I've see lots of links where the the addresses used are NNNN:NNNN:NNNN:NNNN:NNNN:NNNN:NNNN:000E/127 and NNNN:NNNN:NNNN:NNNN:NNNN:NNNN:NNNN:000F/127 which works, yet shouldn't if the 000E address is allways anycast on both sides of the link. Why do /127s work for point to point links? Mike. +------------------- H U R R I C A N E - E L E C T R I C -------------------+ | Mike Leber Direct Internet Connections Voice 510 580 4100 | | Hurricane Electric Web Hosting Colocation Fax 510 580 4151 | | mleber(a)he.net http://www.he.net | +---------------------------------------------------------------------------+

3 2

California ISO announces new notification service
by Sean Donelan 01 May '01

01 May '01

Things change. The California Independent System Operator, the folks in charge of the electric transimission grid in california, announced today they've established a new notification service. In case the ISO implements rotating outages or electrical emergencies, they will send e-mail to newsrooms. >From the media release, it appears this is only for members of the media. For the public, the ISO will add outage information during rotating blackouts to their System Status web page http://www.caiso.com/ Local power companies also have evolving notification policies. As the number of rotating blackouts increase this summer, I expect all of them will provide notification. The Internet will be one of the primary methods for transmitting notifications to the media, which will in turn inform the public.

4 4

OT: GUI ACL Editor?
by SMcGrath＠dhhs.state.nh.us 01 May '01

01 May '01

Look at CiscoSecure policy manager it is fairly resource intensive however it does rule checking and sanity checking of the generated rulesets and provides a means via IPSec of deploying the ACL's in a secure manner Scott ---------------------- Forwarded by Scott McGrath/InformationSystems/Hazen/DHHS on 05/01/2001 12:11 PM --------------------------- David Brousseau <brou(a)enterasys.com>@merit.edu on 05/01/2001 10:59:02 AM Sent by: owner-nanog(a)merit.edu To: nanog(a)merit.edu cc: Subject: OT: GUI ACL Editor? I am currently tasked to evaluate graphical ACL editors for possible use. A web search has not turned up many options that will edit a router's ACLs. Does anyone have any experience with such a tool or know where I might find out more? Thanks for your time, --Dave (See attached file: brou.vcf)

1 0

RE: GUI ACL Editor?
by Irwin Lazar 01 May '01

01 May '01

Howdy, There used to be a very simple shareware tool for creating ACLs Cisco routers at Mentortech.com, but I don't see it anymore. CiscoWorks 2000 also has an ACL management module (Access Control List Manager (ACLM)) See: http://www.cisco.com/warp/public/cc/pd/wr2k/caclm/prodlit/index.shtml Of course, there is always notepad or vi (they're graphical, aren't they?). :-) Irwin > -----Original Message----- > From: David Brousseau [mailto:brou@enterasys.com] > Sent: Tuesday, May 01, 2001 10:59 AM > To: nanog(a)merit.edu > Subject: OT: GUI ACL Editor? > > > I am currently tasked to evaluate graphical > ACL editors for possible use. A web search > has not turned up many options that will edit > a router's ACLs. Does anyone have any > experience with such a tool or know where > I might find out more? > > Thanks for your time, > --Dave

1 0

OT: GUI ACL Editor?
by David Brousseau 01 May '01

01 May '01

I am currently tasked to evaluate graphical ACL editors for possible use. A web search has not turned up many options that will edit a router's ACLs. Does anyone have any experience with such a tool or know where I might find out more? Thanks for your time, --Dave

1 0