January 2010 - Test - lists.nanog.org

Strange Cisco 6503 problem
by Dean Belev 28 Jan '10

28 Jan '10

Hi all, We experienced a strange problem with one of our Cisco 6503 routers - right after the terminal PC connected to the router via console is rebooted the router reboots itself. Even when there is no Eth connection to the PC the situations is the same - reboot follows. I tried to check the messages the router sends: *: %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 31 seconds [1/0] :: No EOBC input, dump debuginfo, interval 10, times 3 : %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 60 seconds [1/0] : %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 90 seconds [1/0] : %FIB-3-FIBDISABLE: Fatal error, slot/cpu 1/0: IPC Failure: timeout : %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 120 seconds [1/0] : %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 150 seconds [1/0]* All the possible reasons according to Cisco that may caused that case will be checked soon because the router is in operational mode although some of them looks strange: /*CPU_MONITOR-3-TIMED_OUT or CPU_MONITOR-6-NOT_HEARD Problem The switch reports these error messages: CPU_MONITOR-3-TIMED_OUT: CPU monitor messages have failed, resetting system CPU_MONITOR-6-NOT_HEARD: CPU monitor messages have not been heard for [dec] seconds Description These messages indicate that CPU monitor messages have not been heard for a significant amount of time. A time-out most probably occurs, which resets the system. [dec] is the number of seconds. The problem possibly occurs because of these reasons: * Badly seated line card or module * Bad ASIC or bad backplane * Software bugs * Parity error * High traffic in the Ethernet out of band channel (EOBC) channel The EOBC channel is a half duplex channel that services many other functions, which includes Simple Network Management Protocol (SNMP) traffic and packets that are destined to the switch. If the EOBC channel is full of messages because of a storm of SNMP traffic, then the channel is subjected to collisions. When this happens, EOBC is possibly not able to carry IPC messages. This makes the switch display the error message. Workaround Reseat the line card or module. If a maintenance window can be scheduled, reset the switch in order to clear any transient issues. ######################################### Error Message %ERR_DET-5-ERR_DET_NO_EOBC_INPUT: No EOBC input, dump debuginfo, interval %u, times %u Explanation No Ethernet Out-of-Band Channel (EOBC) input was received. Debugging information will be dumped. Recommended Action No action is required.*/ I'm curious if some of you faced such a problem - reboot of the router caused by the console connection. Here is some brief info about the router: *Supervisor:* Mod Ports Card Type Model --- ----- -------------------------------------- ------------------ ----------- 1 9 Supervisor Engine 32 8GE (Active) WS-SUP32-GE-3B *Processor:* cisco WS-C6503-E (R7000) processor *IOS:* IOS (tm) s3223_rp Software (s3223_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(18)SXF8, RELEASE SOFTWARE (fc2) Thank you in advance for all your replays. Best~

1 0

Next Generation Leaders (NGL) programme
by Lucy Lynch 27 Jan '10

27 Jan '10

All - This program is a nice opportunity for newer entrants to the Internet community. If you know someone who might benefit, please pass this along. Thanks - - Lucy ---------- Forwarded message ---------- Date: Wed, 27 Jan 2010 12:48:31 -0500 From: Connie Kendig <kendig(a)isoc.org> To: lynch(a)isoc.org Subject: Re: NGL Outreach Assistance The Internet Society (ISOC) is happy to announce a new programme beginning in 2010: the ISOC Next Generation Leaders (NGL) programme. The NGL was officially launched 6 October 2009 at a youth forum lunch during the ITU Telecom World week in Geneva. The programme is aimed at emerging talents across the globe, between the ages of 20 and 40, and is a unique blend of coursework and practical experience to help prepare young professionals from around the world to become the next generation of Internet technology, policy, and business leaders. Programme entrants will complete a tailored eLearning course, covering the essential topics required for effective interactions and relationships within the Internet ecosystem, as well as key concepts and emerging issues in Internet governance. They will be encouraged to apply for the Internet Society?s representation programmes, such as ISOC Ambassadorships to the Internet Governance Forum (IGF), the World Bank, and OECD, and the ISOC Fellowship to the Internet Engineering Task Force (IETF). At the end of the programme, all Next Generation Leaders programme graduates will be invited to submit a proposal for a project focused on an Internet development issue within their own communities. Of those, three projects will be chosen and the respective project leaders will be invited to Geneva for a final, one-week course in Internet diplomacy. The three project leaders will be recognized as the Next Generation Leaders programme laureates, rewarded with special opportunities to network with some of the Internet?s most respected leaders and to participate in special leadership events, and they may be encouraged to start new Internet Society Chapters in their communities. More information on the programme can be found at www.InternetSociety.org/Leaders You may sign up to receive periodic information on the NGL but visiting the programme site and clicking on "Candidates: Register for NGL Information." We will be sharing application details for the eLearning component through the sign up information list in the coming months. If you have any questions or comments about the Next Generation Leaders programme, please contact leaders(a)InternetSociety.org Best wishes, Connie J Kendig Sponsored Programs & Grants Manager Internet Society www.isoc.org <Kendig(a)isoc.org> Tel: (703) 439-2136

1 0

1/8 and 27/8 allocated to APNIC
by Leo Vegoda 27 Jan '10

27 Jan '10

Hi, The IANA IPv4 registry has been updated to reflect the allocation of two /8 IPv4 blocks to APNIC in January 2010: 1/8 and 27/8. You can find the IANA IPv4 registry at: http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.xml http://www.iana.org/assignments/ipv4-address-space/ipv4-address-space.txt Please update your filters as appropriate. The IANA free pool contains 24 unallocated unicast IPv4 /8s. Regards, Leo Vegoda Number Resources Manager, IANA ICANN

30 41

RE: DDoS mitigation recommendations
by Gerald Wluka 27 Jan '10

27 Jan '10

I am new to this mailing list - this should be a response to an already started thread that I cannot see: IntelliguardIT has a new class of network appliance that installs inline (layer 2 appliance). It has no impact on current network capacity and automatically manages flash crowds gracefully. To date the company has over-invested in technology and under-invested in sales and marketing. That is changing now: the company is moving to The Bay Area. As a testament to this over-investment we have a few customers in Asia who had CiscoGuard and/or Arbor Network solutions deployed - they were failing! IntelliGuard's solution solved their DDoS problems. If you would like to learn more please contact me directly (the IntelliGuardIT website is quite dated at this stage. Thanks, ..Gerald

5 4

Re: Using /126 for IPv6 router links
by Randy Bush 27 Jan '10

27 Jan '10

>>> the general intent of a class B allocation is that it is large enough >>> for nearly everybody, with nearly everybody including all but the >>> largest of organisations. >> That would, indeed, work if we weren't short of class B networks >> to assign. > Would you clarify? Seriously? we used to think we were not short of class B networks randy

4 3

Re: L-Root Maintenance 2010-01-27 1800 UTC - 2000 UTC
by Mehmet Akcin 27 Jan '10

27 Jan '10

Hello, L-Root maintenance is starting in 30 mins ( 2010-01-27 1800 UTC ) Regards Joe Abley / Mehmet Akcin / Dave Knight ICANN DNS Ops / L-ROOT >> Hi >> >> As part of staged, incremental deployment of DNSSEC in the root >> zone L-Root will begin serving a Deliberately Unvalidatable >> Root Zone (DURZ) after the completion of its scheduled >> maintenance at 2010-01-27 1800 UTC - 2000 UTC >> >> Please contact L-Root NOC via noc(a)dns.icann.org or >> T: +1.310.301.5817 if you have any questions. >> >> Please contact with rootsign(a)icann.org if you have any >> questions regarding DNSSEC Deployment at root zone.

1 1

Foundry CLI manual?
by David Hubbard 27 Jan '10

27 Jan '10

Anyone have the Foundry/Brocade CLI reference PDF they could send me? Brocade feels you should have a support contract to have a list of commands the hardware you purchased offers and I'm having difficulty with a oc12 pos module. Thanks, David

7 6

Ethernet Services cards types & queue values
by Burak Dikici 27 Jan '10

27 Jan '10

Hello, There is different types for the Cisco 7600 Series Ethernet Services cards. ( More expensive cards with high queue values and less expensive cards with low queue values.) http://www.cisco.com/en/US/prod/collateral/routers/ps368/data_sheet_c78-549… Hardware queues ES Plus XT 40G line cards • 128,000 ingress queues • 256,000 egress queues ES Plus XT 20G line cards *• 64,000 ingress queues* • 128,000 egress queues Hierarchical QoS (H-QoS) http://www.cisco.com/en/US/prod/collateral/routers/ps368/data_sheet_c78-570… Hardware queues Cisco 7600 Series ES Plus Transport 40G and 20G Line Cards *Supporting up to 16 level 4 queues per physical port* Hierarchical QoS (H-QoS) Low queue cards have got only 4 queues per physical port. High queue cards have got minimum 64.000 queue. This is very huge difference. In what kind of scenario do we have to use the High queue cards ? Could you give some examples please ? Kind Regards. Burak

2 1

unreachable Sites
by Reynold Guerrier 26 Jan '10

26 Jan '10

I have been notified this morning by several people that there is some websites that are unreachable from Haiti: http://www.hostcentric.com, http://www.gama.ht those are examples. It happens with different ISP. When we change th DNS using the google one 8.8.8.8 it's ok for some but some others still remain unreachable. Can some of you from the Nanog list check and advise? Thank you -- =================================== Reynold Guerrier IT Consultant 509-3446-0099 IM: reygue(a)hotmail.com Skype: reygji

2 1

IOS family naming
by Andrey Gordon 26 Jan '10

26 Jan '10

Hi List, Anyone recalls ever seeing the IOS naming convention document. In particular I'm interested in differences between families and trains. This is all I found: http://www.cisco.com/warp/public/620/1.html#topic1 But im looking for something a bit more recent maybe? Can figure out differences between say SG, SGA, EW and EWA. A link to the cipher would certainly help. ----- Andrey Gordon [andrey.gordon(a)gmail.com]

4 3