March 2011 - Test - lists.nanog.org

Any AT&T IP Transit sales folks listening?
by Jason Lixfeld 10 Mar '11

10 Mar '11

I'm looking for an AT&T IP Transit sales contact. Email links on the website don't seem to work and I was on hold for 30 minutes with an auto-attendant when I tried to call. I'm looking for transit on a 1Gbps access out of TelX @ 60 Hudson. Thanks in advance.

1 0

Internet Edge Router replacement - IPv6 route table size considerations
by Chris Enger 10 Mar '11

10 Mar '11

Greetings, I am researching possible replacements for our Internet edge routers, and wanted to see what people could recommend for a smaller chassis or fixed router that can handle current IPv4 routes and transition into IPv6. Currently we have Brocade NetIron 4802s pulling full IPv4 routes plus a default route. I've looked at Extreme, Brocade, Cisco, and a few others. Most range from 256k - 500k IPv4 and 4k - 16k IPv6 routes when CAM space is allocated for both. The only exception I've found so far is the Cisco ASR 1002, which can do 125k v6 along with 500k v4 routes at once. I'm curious if any other vendors have comparable products. My concern is trying to find a router (within our budget) that has room for growth in the IPv6 routing space. When compared to the live table sizes that the CIDR report and routeviews show, some can't handle current routing tables, let alone years of growth. BGP tweaks may keep us going but I can't see how 16k or fewer IPv6 routes on a router is going to be viable a few years from now. Thank you, Chris Enger

8 10

Loading MIB Definitions - Help me get out of SNMP Hell!
by Joe Renwick 10 Mar '11

10 Mar '11

Hello All, Apologize for my lameness in advance. I have spent some serious time researching this topic and have decided to reach out to the forums as the two of the smartest people I know have hit the same wall in the past. Bottom line is I do not understand how to add (?compile?) MIB(s) into my SNMP management system. I use Cacti running on Ubuntu server and it works great. My only frustrations have been in the area of finding the MIB OID(s) to use for gathering specific data. In many cases with CIsco I manage to find the OID name i.e. 'CISCO-PROCESS-MIB::cpmCPUTotal5min.9' but Cacti needs the numeric value. So I try 'snmpget' and here is what I see: *jozo@crdtools:/var/www/cacti/rra$ snmpget -v 2c -c ptasa2etb 192.168.55.5 CISCO-MEMORY-POOL-MIB::ciscoMemoryPoolFree* *MIB search path: /home/jozo/.snmp/mibs:/usr/share/mibs/site:/usr/share/snmp/mibs:/usr/share/mibs/iana:/usr/share/mibs/ietf:/usr/share/mibs/netsnmp * *Cannot find module (CISCO-MEMORY-POOL-MIB): At line 0 in (none)* *CISCO-MEMORY-POOL-MIB::ciscoMemoryPoolFree: Unknown Object Identifier* Did some research and using the following link I loaded the MIB(s)... which basically consisted of a 'wget' of the MIB files into my /home/jozo/.snmp directory. At least I think they are the MIB definition files with a '.my' extension. http://tools.cisco.com/Support/SNMP/do/BrowseMIB.do?local=en&step=2&mibName… But I still cannot get the numeric OID values: *jozo@crdtools:~$ snmptranslate -On CISCO-PROCESS-MIB::cpmCPUTotal5min.9* *No log handling enabled - turning on stderr logging* *Unexpected index type: 7 cpmCPUTotalIndex 9* *.1.3.6.1.4.1.9.9.109.1.1.1.1.5.9* Can anyone point me in the right direction. Any links or advice on how to operate SNMP on a Unix type system would be greatly appreciated. Even a response like "RTMF Buddy" would be awesome if a manual was recommended. Thanks to all who read this email. You deserve a beer. Cheers, -- Joe Renwick IP Network Consultant, CCIE #16465 GO NETFORWARD! Direct: 619-800-2055, Emergency Support: 800-719-0504 Is your network moving you forward?

2 2

RE: Interesting google redirects.
by Skywing 10 Mar '11

10 Mar '11

(Apologies for the top-post.) I've been experiencing the same. Seems like their geolocation data is busted (since last morning at least), if I had to take a guess. - S -----Original Message----- From: Wil Schultz <wschultz(a)bsdboy.com> Sent: Thursday, March 03, 2011 7:25 To: NANOG Operators Group <nanog(a)nanog.org> Subject: Interesting google redirects. Has anyone else had complaints that www.google.com is occasionally redirecting (http 302) to www.google.com.hk this morning? -wil

12 11

Geolocation Info Correction Needed at Apple, Yahoo, MSN
by Schiller, Heather A 10 Mar '11

10 Mar '11

If anyone is listening, would you be so kind as to update geolocation info for the following-- they are in Mexico, not Argentina. inetnum: 186.64.16.176/29 status: reallocated owner: Infor Global Solutions Mexico SA de CV ownerid: MX-IGSM-LACNIC responsible: Hector Garcia Bernal address: Montes Urales 505 Lomas de Chapultepec, , address: - mexico city - country: MX I couldn't find information on how to get geolocation errors corrected for Apple, Yahoo or MSN on their websites. It would be nice if folks would also update http://nanog.cluepon.net/index.php/GeoIP which details the process for several large sites. Thanks, --Heather ~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~*~* Heather Schiller Network Security - Verizon Business 1.800.900.0241 security(a)verizonbusiness.com

4 4

dhcp6 solicit
by Jeroen van Aart 09 Mar '11

09 Mar '11

I was doing some packet scanning on one of my IPv6 enabled servers and I found traffic such as the following frequently (IPs slightly edited): 02:23:02.410360 IP6 fe80::ff78.546 > ff02::2.547: dhcp6 solicit Not having done too much ipv6 packet scanning yet I am curious to know if this is a mis-configured dhcp6 server somewhere? Is this a rather common thing to see in IPv6 traffic? The addresses are not mine, neither do I run a dhcpv6 daemon (no need for it). Thanks, Jeroen -- http://goldmark.org/jeff/stupid-disclaimers/ http://linuxmafia.com/~rick/faq/plural-of-virus.html

2 1

ipv6 question
by ann kok 09 Mar '11

09 Mar '11

Hi I read ipv6forum.pdf about ipv6 It said MTU must be at least 1280 bytes (1500+) Does it mean to set the mtu over 1500 I set my linux box eth0 as 2001:db8:cafe:1111::12/64 but I can't ping it inet6 2001:db8:cafe:1111::12/64 scope global tentative ls it this problem? Thank you # ping6 2001:db8:cafe:1111::12 PING 2001:db8:cafe:1111::12(2001:db8:cafe:1111::12) 56 data bytes >From ::1 icmp_seq=1 Destination unreachable: Address unreachable >From ::1 icmp_seq=2 Destination unreachable: Address unreachable

4 3

Anyone has a contact with IP clue at VerizonBusiness?
by Alex Yuriev 09 Mar '11

09 Mar '11

I know it may be a stretch but is there a remote possibility that someone knows anyone inside Verizon Business who has an ounce of clue about IPv4 address allocation and routing? It seems the panic over IPv4 scarcity is resulting in the most peculiar ideas bubbling up in the IP provisioning side which must be stomped out of existence before such ideas create signigicant connectivity issues. Thanks, Alex

3 2

L3DSR server side bits open sourced
by Jan Schaumann 09 Mar '11

09 Mar '11

Hello, Some of you may remember my talk at Nanog51 about L3DSR (http://nanog.org/meetings/nanog51/presentations/Monday/NANOG51.Talk45.nanog…) I had promised that we'd try to get the server side bits released soon. While it took longer than anticipated, I'm glad to be able to announce that as of about ten minutes ago, they have finally escaped^Wbeen released into the wild: https://github.com/yahoo/l3dsr It's possible that we will try to put together a more formal announcement of this, but since I had promised the release at Nanog, I figured it'd be fair to let you guys know first. :-) Vanity plug: https://twitter.com/#!/jschauma/status/45181937089908736 Happy L3DSR'ing! -Jan

5 7

How many IPv6 BGP routes are you planning for in DFZ?
by Jeff Wheeler 09 Mar '11

09 Mar '11

On Wed, Mar 9, 2011 at 2:19 AM, George Bonser <gbonser(a)seven.com> wrote: > The ipv4-ipv6-2 CAM profile in 5.1 gives 768K v4 routes and 64k v6 > routes which should be good for quite a while. That is provided you How many IPv6 BGP routes are folks typically planning for in the DFZ before a hardware upgrade is required? Here are some relevant figures (note that my script makes some minor errors but this is good enough for discussion purposes): IPv6: Unique Origin ASes seen: 3287 Examined 4705 active routes IPv4: Unique Origin ASes seen: 36707 Examined 352688 active routes Making some assumptions, let's say every active ASN in DFZ will announce a mean of 1.4 IPv6 routes (the number seen today.) If IPv6 grows from under 10% of ASNs today to 100% of ASNs in a year or two, we will see about 53k IPv6 routes in DFZ. Keep in mind that many, if not most, ASNs originating IPv6 routes today have substantially no production services on IPv6, and they may deaggregate more in the future, etc. Some folks seem to believe that not every ASN will announce routes to the DFZ. I don't think that is a safe assumption upon which to base purchasing decisions for routers which should have a life-cycle of several years. Whether or not networks *should* announce more than one route, or any routes at all, seems debatable; but when making router purchasing decisions, I don't want to tell my clients two years from now that they have to spend capital dollars on routers just to gain IPv6 FIB. I also don't want to tell them they have to filter some routes, and make any BGP customers unhappy, and live with other downfalls of that unfortunate compromise. I am certainly not deploying any boxes that will only do 64k IPv6 FIB in default-free part of my clients' networks. It certainly will work now, and will almost certainly be safe in one year. In two years, it seems a little questionable. Beyond that time-frame, it is much easier to justify new routers, as ports become cheaper and faster; but I still do not want my clients to be forced to buy new routers simply because of overly-optimistic assumptions about IPv6 DFZ size. Really, I would like vendors to make IPv4 and IPv6 FIB come from the same pool (with obviously different allocation sizes) or allow me to configure the partitioning as I see fit. This has been the case for quite a few platforms for many years. I am not comfortable guessing at whether I will first need to exceed 500K IPv4 routes (maybe we won't even see that number) or 64K IPv6 routes (this seems a virtual certainty, but when it happens is hard to say.) Once you add L3VPN into your list of concerns, your future FIB needs become even more difficult to predict. -- Jeff S Wheeler <jsw(a)inconcepts.biz> Sr Network Operator / Innovative Network Concepts

2 1