September 2004 - Test - lists.nanog.org

RE: 10GE access switch router
by Temkin, David 29 Sep '04

29 Sep '04

Bill, With the right amount of prep work and understanding of how the stacking works, you can control everything you complained about. I complained about the same stuff until I read the document that explains how to: 1) Renumber a switch in the cluster (and all of it's interfaces with it) 2) Hot swap a new switch into the cluster 3) - and this one's sweet - upgrade the s/w on the entire cluster in one shot, even if they're different models 4) Control which switch is the master so that adding a new switch to the stack doesn't chance screwing up your configs. 5) Permanently remove all stacking config from the switch The actual backplane has lived up performance wise in the testing I've done, but I haven't come anywhere near testing it to 32gbps. Just the same as thousands of people have wiped out every VLAN on their network by putting in a switch with a higher VTP revision number with no VLANs defined, it takes a learning curve to work well with these suckers. Granted - the software has been somewhat buggy - but those aren't the merits I'm debating. http://www.cisco.com/en/US/customer/products/hw/switches/ps5023/products _configuration_guide_chapter09186a00801a6558.html > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of Bill Woodcock > Sent: Wednesday, September 29, 2004 11:33 AM > To: Deepak Jain > Cc: Frederic NGUYEN; nanog(a)merit.edu > Subject: Re: 10GE access switch router > > > On Tue, 28 Sep 2004, Deepak Jain wrote: > > Just a note, if you want redundant 10GE uplinks you > need to get two of > > these and stack them. The stacking interface does not > reduce the amount > > of switching bandwidth to the front ports IIRC. > > ...and the stacking interface is actually pretty lousy, from > our testing. > We were anticipating really liking it, but we haven't touched > it again, since our lab work. Obviously it precludes > hot-swappability, but beyond that, using it wipes any > preexisting configuration on all but the first box (and out > of two, I don't know how to predict which it will decide is > first, in advance), and it leaves the port-numbering screwed > up on any boxes that have used it, in perpetuity. > > -Bill > > > IMPORTANT: The information contained in this email and/or its attachments is confidential. If you are not the intended recipient, please notify the sender immediately by reply and immediately delete this message and all its attachments. Any review, use, reproduction, disclosure or dissemination of this message or any attachment by an unintended recipient is strictly prohibited. Neither this message nor any attachment is intended as or should be construed as an offer, solicitation or recommendation to buy or sell any security or other financial instrument. Neither the sender, his or her employer nor any of their respective affiliates makes any warranties as to the completeness or accuracy of any of the information contained herein or that this message or any of its attachments is free of viruses.

2 1

Reston agenda update
by Susan Harris 29 Sep '04

29 Sep '04

We've added a few new talks and a tutorial for the Reston NANOG meeting; they're listed below in caps and, um, stars. Abstracts are linked off www.nanog.org: SUNDAY TUTORIALS ---------------- **ISP SECURITY TOOLKITS** Level: Introductory/Intermediate Tim Battles, AT&T - Options for Blackhole and Discard Routing Joe Soricelli, Juniper Level: Intermediate - BGP Multihoming Techniques Philip Smith, Cisco Level: Introductory/Intermediate - Internet Number Resource Management and Administration Ray Plzak/Richard Jimmerson, ARIN Level: Introductory - IPv6 Deployment and Case Studies Salman Asadullah and Ciprian Popoviciu, Cisco Level: Introductory/Intermediate MONDAY-TUESDAY GENERAL SESSION ------------------------------ **LONG DISTANCE WIRELESS NETWORKING (USING NON-LICENSED RADIOS) Tim Pozar **NETWORK DESIGN TO SUPPORT VERY HIGH-CAPACITY STREAMING AND CACHING INFRASTRUCTURES Vijay Gill, AOL Time Warner **EXTENSION OF MULTI-SERVICE NETWORKS Dave Siegel, Global Crossing **WHAT WILL STOP SPAM? Charles Stiles, AOL **LINKRANK: A TOOL FOR DIAGNOSIS OF BGP ROUTING DYNAMICS Mohit Lad, UCLA; Dan Massey, Colorado State University; Lixia Zhang, UCLA - Botnets John Kristoff, Northwestern University - Optical Switching, a Great Tool in Platform Migration at AMS-IX Romeo Zwart, Amsterdam Internet Exchange - 802.1X: Deployment Experiences and Obstacles to Widespread Adoption Terry Simons, University of Utah/open1x.org Jon Snyder, Portland State University - DNSSEC Deployment: Big Steps Forward; Several Steps to Go Steve Crocker, Shinkuro - DNS Anomalies and Their Impact on DNS Cache Servers Katsuyasu Toyama, Keisuke Ishibashi, Tsuyoshi Toyono, Katsuyasu Toyama, NTT Labs; Masahiro Ishino, Chika Yoshimura, NTT Communcations; Kazunori Fujiwara, JPRS - Best Data Practices for Online Service Providers from the Electronic Frontier Foundation, Tim Pozar, EFF - Tracking Global Threats with the Internet Motion Sensor Michael Bailey, Evan Cooke, University of Michigan Danny McPherson, Arbor Networks - Detecting Inconsistent Advertisements from Neighboring ASes Nick Feamster, MIT, Z. Morley Mao, University of Michigan Jennifer Rexford, AT&T Research - aflow - a Network Analysis Tool Dan Ardelean, ARIN/Purdue University - Impressions: An Overview of the Global IPv6 Routing Table Gert Doering, SpaceNet AG, author; Cathy Wittbrodt, presenter RESEARCH FORUM -------------- - Sizing Router Buffers Guido Appenzeller, Stanford University - Performing BGP Experiments on a Semi-Realistic Internet Environment Ke Zhang, Soon-Tee Teoh, Shih-Ming Tseng, Chen-Nee Chuah, Kwan-Liu Ma, and Felix Wu, University of California, Davis BOFs ---- - ISP Security and NSP-SEC BOF VII Danny McPherson, Arbor, and Merike Kaeo, Double Shot Security, moderators - Optimizing Operational Input to ARIN: What Is Needed and How Do We Get It? ARIN staff, moderators

1 0

Is those ICP crazy -- 10GB free emailbox?
by Joe Shen 29 Sep '04

29 Sep '04

Hi, I just received an email from one of my friends and he told me http://www.hriders.com/ is providing free 10GB email box for subscribers. Is that crazy in competition of BIG size free email account? Joe __________________________________________________ Do You Yahoo!? Log on to Messenger with your mobile phone! http://sg.messenger.yahoo.com

2 1

Re: 10GE access switch router
by Frederic NGUYEN 28 Sep '04

28 Sep '04

Thanks to everyone for your answers. Actually it would only be an access switch router. BGP is not really necessary. OSPF or static routing would be just fine. The most important need is wire-speed switching/routing capabilities and multicast support. IPv6 support may also be of use. Fred ----- Message d'origine ----- De : "Erik Haagsman" <erik(a)we-dare.nl> À : "Frederic NGUYEN" <fnguyen(a)t-online.fr> Cc : <nanog(a)merit.edu> Envoyé : mardi 28 septembre 2004 22:54 Objet : RE: 10GE access switch router Depending on what Layer 3 features you need you might check out Foundry's new FastIron Edge Switches, the FES4xx: http://www.foundrynet.com/products/l23wiringcloset/fastiron/FESX424_X448.ht… Don't support BGP afaik, but can run basic routing and OSPF quite well in a bit less than 2U. I'd expect a small formfactor NetIron with 10GigE support to come out as well which could also solve your BGP issues (depending on the amount of traffic), though I doubt any of their switches are able to route a full 10 GigE worth of traffic. Extreme also has a Summit doing this, with just about the exact same features, though usually a bit more RAM (and buggier L3 code ;-) Cheers, Erik

1 0

RE: 10GE access switch router
by Burton, Chris 28 Sep '04

28 Sep '04

The Cisco Catalyst 3750G-16TD is a 1RU switch and I believe has a single 10GE Xenpak uplink; not sure how many ports you are looking for. Chris Burton Network Engineer Walt Disney Internet Group - Network Services The information contained in this e-mail message is confidential, intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please contact Walt Disney Internet Group at 206-664-4000. -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Frederic NGUYEN Sent: Tuesday, September 28, 2004 1:26 PM To: nanog(a)merit.edu Subject: 10GE access switch router Is anyone of you awared of the existence of an access switch router (L2/L3) with GE interfaces and 10GE uplinks? I'm looking for something small (around 1U to 2U). Is there any vendor selling such a product? Thanks, Fred

1 0

MPLScon Call For Presentations
by Irwin Lazar 28 Sep '04

28 Sep '04

The ³Call for Presentations² for MPLScon 2005 is now available on the web at: http://www.mplscon.com/speaker/submit_pres.html MPLScon 2005 will be held on May 16-19 at the Marriott Financial Center in New York City. Please let me know if you have any questions. Submissions are due November 19, 2004. Thanks, Irwin

1 0

Earthquake in Northern California
by Dennis Dayman 28 Sep '04

28 Sep '04

6.0 and we have had 47 small ones since the larger one... 160 miles south of SFO airport... Police and fire are reporting broken pipes and damage to streets. No idea about internet access... http://quake.wr.usgs.gov/recenteqs/Maps/120-36.htm -Dennis

3 2

Re: Earthquake in Northern California
by Aviva Garrett 28 Sep '04

28 Sep '04

Hi Dennis, It looks like the epicenter is near Parkfield. Where are you? Thanks, ..Aviva In message <101B331C5846(a)ddsob.com>you write: > > 6.0 and we have had 47 small ones since the larger one... > > 160 miles south of SFO airport... > > Police and fire are reporting broken pipes and damage to streets. No idea > about internet access... > > http://quake.wr.usgs.gov/recenteqs/Maps/120-36.htm > > -Dennis

2 1

RE: Website contact for www.cisco.com
by Burton, Chris 28 Sep '04

28 Sep '04

All very true; but I prefer take away from everything complicated and make it simple (This is my opinion, YMMV). Since nothing in my environment has changed, no broken equipment or software issue, and all the routes were correct (including CEF/dCEF) and I was able to access Cisco's site from several other IP address from my network as well as outside networks I made a logical assumption (or at least I think it was logical) that it was "possible" that Cisco blocking this one particular /32. I still do not know the answer to this question as by the time Cisco replied to me with a canned answer access to Cisco's website from that IP address was working again. Chris Burton Network Engineer Walt Disney Internet Group - Network Services The information contained in this e-mail message is confidential, intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please contact Walt Disney Internet Group at 206-664-4000. -----Original Message----- From: Petri Helenius [mailto:pete@he.iki.fi] Sent: Sunday, September 26, 2004 1:53 PM To: joe mcguckin Cc: Burton, Chris; crist.clark(a)globalstar.com; Temkin, David; NANOG Subject: Re: Website contact for www.cisco.com joe mcguckin wrote: >Or CEF/DCEF if a linecard 'loses' a forwarding entry. > > > Would that affect just one /32 out of a /22 if the subnet is not directly connected? (it probably would if you run some kind of ACL's that require flow state to be retained, but other than that, it should not) Obviously load balancers count as content switching devices which can also cause random brokenness. Pete >On 9/26/04 1:03 PM, "Petri Helenius" <pete(a)he.iki.fi> wrote: > > > >>Burton, Chris wrote: >> >> >> >>>I also ran into this problem yesterday, I contacted Cisco and >>>they said that they were not block any of my addresses or ranges which I >>>found to be strange since from what I could tell out of an entire /22 >>>only one IP address was affected. As of around 0500 PDT this morning I >>>was able to access Cisco's website again though. >>> >>> >>> >>> >>> >>"Content switching", when partially broken, can do fancy effects. >> >>Pete >> >> >> > > >

2 1

IETF anti-spam MARID group disbands
by Hank Nussbacher 28 Sep '04

28 Sep '04

http://www.nwfusion.com/news/2004/092704ietfspam.html See spam at 11:00 o'clock for further details. -Hank

2 2