August 2001 - Test - lists.nanog.org

OSPF Network design
by jan Huizinga 15 Aug '01

15 Aug '01

Hello, I have a question regarding OSPF design. I have a customer which has a hub and spoke topology, in the main site the have 5 routers and every remote site is using 3 routers and a 1/4 class C addresses. There are 8 remote sites. They have created for every site an area, so in total 9 areas + an area 0 makes 10 areas. Is this a typical OSPF design? At this moment this network is a 100% VoIP network (H.323). In the future they want also to give Internet access to their customers (dial-up and leased lines). The remote sites are connected with 1MB links, and some of them shall be upgraded to 2MB links. Any ideas? Or does some one have a good reference to a site or a book that deals with the designing of a (OSPF) network. I have books about OSPF but they talk all about the protocol, and don't give real world examples how to design this. Thanks, Jan

5 4

Affects of the balkanization of mail blacklisting
by jlewis＠lewis.org 15 Aug '01

15 Aug '01

This is getting really annoying. It seems multiple large networks have stolen copies of the MAPS DUL (I wonder if this is the cause or an effect of MAPS going commercial?) which of course are not being kept in-sync with the real MAPS DUL. First it was Earthlink. Today's winner is usa.net. >>><xxxxxx(a)usa.net> >>> (reason: 550 Mail from 209.208.x.y refused. Please refer to >>> http://mail-abuse.org/dul for an explanation.) The address block in question above was removed from the DUL almost 2 weeks ago, but usa.net is still blocking mail from it today, and claiming that they're doing so via the MAPS DUL. How many other networks have stolen copies of the DUL and either nobody maintaining their local copies or bogus sendmail reject messages pointing you to the wrong place (or no place) to get the problem fixed? If you're going to run your own locally maintained email blacklist, at least get the rejection messages right and give out a correct URL for procedures on getting off your blacklist. -- ---------------------------------------------------------------------- Jon Lewis *jlewis(a)lewis.org*| I route System Administrator | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

34 56

NOC servers with public/private ip address
by R Z 15 Aug '01

15 Aug '01

Hi, all, We are an ISP with some internet routers. The question is if we should use public or private ip address in NMS/NOC to manage these routers. If we want to save ip address and use private ip address, we need to have private address on the internet routers. Although I am almost religious that internet routers should NEVER have private address in the routing table, I still need more reasons to convince other people. Can someone pls tell me the pros and cons of using private ip address? Is there any issue with private ip address? What is the practice in your network? Your insight is highly appreciated. Richard _________________________________________________________ Do You Yahoo!? Get your free @yahoo.com address at http://mail.yahoo.com

6 6

FW: Net-block issues
by Roeland Meyer 15 Aug '01

15 Aug '01

1 0

FW: Net-block issues
by Roeland Meyer 15 Aug '01

15 Aug '01

1 0

Net-block issues
by Roeland Meyer 15 Aug '01

15 Aug '01

|> From: Elisabeth Porteneuve [mailto:Elisabeth.Porteneuve@cetp.ipsl.fr] |> Sent: Wednesday, August 15, 2001 1:58 AM |> The rivers of comments has been sent out about domain |> names, there is a dangereous silence about IP numbers. It is with wry amusement that I have been following the MAPs debate, on NANOG, recently. Then you make this comment, it couldn't dove-tail more beautifully. Those that do not know what MAPs is, please review http://www.mail-abuse.org/. The fundimental function is to create blacklists used for various filtering of IP blocks. While this sounds innocuous on its face, MAPS has recently announced intention of charging for their service, in order to raise money for legal fees (they are under legal attack). Until now, Paul Vixie has been the main funder of MAPs. The problem is that MAPS was distributing the lists and there were many local copies, within places like EarthLink and AOL. As long as those copies are maintained by MAPS, this is not a serious problem. They have an efficient and timely distribution mechanism. The result of an net-block being listed in MAPS is that entire chunks of the Internet cannot reach that net-block. This is done at the provider level. The effects are global in that they over-ride ARIN, RIPE, and APNIC. The problem arises when there are stale entries in the black-list. In fact, the danger has always been, the issue of stale entries. The effect, given MAPS market-share, is that a net-block can be issued, to a new business, that may be perfectly useless and neither the ISP or the business knows about it until it is too late. I might point out that a similar problem can occur with DNs, so it is not entirely an PSO issue. There are now stale entries, in abundance, because many providers are still evaluating the new cost issues. Meanwhile, they have disconnected from the distro system and aren't having their black-lists updated. Ergo, they have stale entries. What this, in effect, does is to over-ride various registry policies. Names and net-blocks that are issued may not, in fact, be issued. Names are not a serious cost issue and they can, with some logistical difficulty, be re-issued. However, net-blocks cost over $1US/month (at the ISP level), or $2500/year from ARIN (the US registry), and they are not all that plentiful. The fundimental process disconnect here is that, IMHO, the various registries should be performing the MAPS function as part of their policy enforcement mechanism. This is not written into any of the registrar/registry agreements. If anything argues for a centralised systems approach, the MAPS functionality does. IMHO, this makes it an ICANN issue. Yes, this also politicizes it somewhat. No, some NANOG denizens won't like it and that is guaranteed. -- R O E L A N D M J M E Y E R Managing Director Morgan Hill Software Company t:01 925 373 3954 c:01 925 352 3615 f:01 925 373 9781

1 0

RE: NOC servers with public/private ip address
by Roeland Meyer 15 Aug '01

15 Aug '01

4 4

www.ncs.gov
by Sean Donelan 15 Aug '01

15 Aug '01

Does anyone know what's up/down with NCS's web server? Their network connection seems to be alive, but no response from any of their public web servers.

2 1

RE: OSPF Network design
by Rizkalla, Simon 15 Aug '01

15 Aug '01

Jan, Creating 9 different areas might be hard to manage, therfore I propose that you may want to simplify this by clustering the remote sites into provinces/states. A book that my collegue and I have been reading in regards to our OSPF network design has been the Cisco - OSPF Design Guide, or Designing and Implementing an OSPF network - Cisco. Regards Simon -----Original Message----- From: jan Huizinga [mailto:jhui@gdb.com.gr] Sent: Tuesday, August 14, 2001 8:24 PM To: nanog(a)merit.edu Subject: OSPF Network design Hello, I have a question regarding OSPF design. I have a customer which has a hub and spoke topology, in the main site the have 5 routers and every remote site is using 3 routers and a 1/4 class C addresses. There are 8 remote sites. They have created for every site an area, so in total 9 areas + an area 0 makes 10 areas. Is this a typical OSPF design? At this moment this network is a 100% VoIP network (H.323). In the future they want also to give Internet access to their customers (dial-up and leased lines). The remote sites are connected with 1MB links, and some of them shall be upgraded to 2MB links. Any ideas? Or does some one have a good reference to a site or a book that deals with the designing of a (OSPF) network. I have books about OSPF but they talk all about the protocol, and don't give real world examples how to design this. Thanks, Jan

2 1

Re: Wither DSL?
by up＠3.am 14 Aug '01

14 Aug '01

On Tue, 14 Aug 2001, Jason K. Schechner wrote: > Where is "here"? If it's anywhere near the DC area I may have to make > some calls.... Here is PA. However, I believe Verizon offers this plan throughout former Bell Atlantic territory, including DC, and MD. You need to ask for "Virtual Office ISDN". If you commit to 2 years it's down to $62/mo here in PA, I think about $40 in DC, MD, VA and WV. > On Tue, 14 Aug 2001 up(a)3.am wrote: > > > On Tue, 14 Aug 2001, J.D. Falk wrote: > > > > > Northpoint is gone. Covad and Rhythms are both clearly poised > > > to be bought and borged into some larger unfriendly telco. Is > > > there any non-monopoly DSL option left? > > > > I don't think Rhythms is rapidly going the way of Northpoint...not borged, Typo here...delete "don't". > > but just abandoned. > > > > > What are y'all telling your customers? > > > > Well, around here, Verizon has finally come up with a semi-affordable ISDN > > unmetered plan, and our NASen still do ISDN :) James Smallacombe PlantageNet, Inc. CEO and Janitor up(a)3.am http://3.am =========================================================================

1 0