January 2012 - Test - lists.nanog.org

dial-peer authenticaton in ios 12.3?
by Gregory Edigarov 19 Jan '12

19 Jan '12

Hello everybody, Is there a good person who could try to remember how to configure authentication in dial-peer on IOS (tm) MC3810 Software (MC3810-A2ISV5-M), Version 12.3(13), RELEASE SOFTWARE (fc2)? dial-peer voice 1 pots authentication username someuser password somepassword does not seem to be any help as it points an error on "authentication" keyword. Is there anything I could try to do about this before I through it out from my balcony? Thank you. -- With best regards, Gregory Edigarov

1 0

World IPv6 Launch Day - June 6, 2012
by Derek Ivey 19 Jan '12

19 Jan '12

Just saw this new site: http://www.worldipv6launch.org/ Many large companies and ISPs are planning to finally go live with IPv6 by June 6, 2012. I don't see Verizon (my ISP) on the list though :(. I'm glad to see companies moving forward with IPv6! Derek

16 21

Tata AS6453 not peering with NTT AS2914 in Japan
by Anurag Bhatia 19 Jan '12

19 Jan '12

Hello everyone! Was wondering is there's anyone from Tata Communications (VSNL/TeleGlobe) or NTT Communications? I can see Tata Comm's AS6453 is not exchanging traffic with NTT AS2914 in Japan. Is there's any specific reason for that? I can see traffic exchange is being done at London, New York, San Jose but not in Japan. Thus packets from Tokyo (Tata) to Tokyo (NTT) and having a round trip to US. This is screwing up performance of networks which are in downstream for NTT e.g Akamai. Route to Akamai.com webserver from Indian networks is going like India - UK - Japan adding over 200ms of overhead latency. If someone is interested in detailed data, I have blogged about it here <http://link.anuragbhatia.com/zywpr>. Any ideas what's preventing them peering in Japan itself? -- Anurag Bhatia anuragbhatia.com or simply - http://[2001:470:26:78f::5] if you are on IPv6 connected network! Twitter: @anurag_bhatia <https://twitter.com/#!/anurag_bhatia>

2 2

Re: DNS Attacks
by Dennis 18 Jan '12

18 Jan '12

I agree with Roland on the firewall placement. I add that the attack would have likely succeeded to exhaust the servers. There is alot of recent ddos activity on DNS with what looks like legitimate queries. You should also look at some DOS/ application level protections; Radware and Arbor top the list. Leigh Porter <leigh.porter(a)ukbroadband.com> wrote: > > >On 18 Jan 2012, at 05:06, "toor" <lists(a)1337.mx> wrote: > >> Hi list, >> >> I am wondering if anyone else has seen a large amount of DNS queries >> coming from various IP ranges in China. I have been trying to find a >> pattern in the attacks but so far I have come up blank. I am completly >> guessing these are possibly DNS amplification attacks but I am not >> sure. Usually what I see is this: >> > >At various seemingly random times over the past week I have had a DNS which is behind a firewall come under attack. The firewall is significant because the attacks killed the firewall as it is rather under specified (not my idea..). > >It did originate from Chinese address space and consisted of DNS queries for lots of hosts. There was also a port-scan in the traffic and a SYN attack on a few hosts on the same small subnet as the DNS, a web server and an open SSH port. > >-- >Leigh Porter > > >______________________________________________________________________ >This email has been scanned by the Symantec Email Security.cloud service. >For more information please visit http://www.symanteccloud.com >______________________________________________________________________ > >

7 7

VPC=S/MLT?
by -Hammer- 18 Jan '12

18 Jan '12

OK, So I'm doing a lot of reading lately on Nexus as we are about to get into the 7k/5k game and of course a lot of the marketing revolves around VPC. Every time I see it referenced, I keep remembering a reasonably reliable Nortel implementation called Split MLT (Multi Link Trunk). Is there something fancy here that I'm missing in the docs or am I wrong in equating the two? Isn't VPC just S/MLT? It's just that Cisco has shown up 8 years late and is trying to hype it up to compensate? -- -Hammer- "I was a normal American nerd" -Jack Herer

5 11

RE: enterprise 802.11
by Martin Hotze 18 Jan '12

18 Jan '12

Hi, the wireless itself is not the big problem, most of your devices (Mac) will be the problem (BTDTGNS). And my wild guess is that mobile phones will also be mostly iphones, plus some ipads. ZyXEL has good WLAN controllers, as does LANCOM. Both have very good products for the money. No need - IMHO - to look into $isco. As for the iOS problem, read on here: http://www.net.princeton.edu/apple-ios/ios41-allows-lease-to-expire-keeps-u… #m > -----Original Message----- > Date: Sun, 15 Jan 2012 11:30:46 -0800 > From: Ken King <kking(a)yammer-inc.com> > To: nanog(a)nanog.org > Subject: enterprise 802.11 > Message-ID: <36170983-EAA1-4BDD-B0AF-5B045FD53321(a)yammer-inc.com> > Content-Type: text/plain; charset=us-ascii > > I need to choose a wireless solution for a new office. > > up to 600 devices will connect. most devices are mac books and mobile > phones. > > we can see hundreds of access points in close proximity to our new office > space. > > what are the thoughts these days on the best enterprise solution/vendor? > > Thanks for your replies. > > > Ken King >

6 6

accessing multiple devices via a script
by Abdullah Al-Malki 18 Jan '12

18 Jan '12

Hi fellows, I am supporting a big service provider and sometimes I face this problem. Sometimes I want to access my customer network and want to extract some verification output "show commands" from a large number of devices. What kind of scripting solutions you guys are using this case. Appreciate the feedback, Abdullah

15 17

Slighty OT: GoDaddy and SPF records...
by Mike Lyon 18 Jan '12

18 Jan '12

Howdy folks, Was curious to see if anyone on the list has ever been successful with setting up SPF records on their domains that are hosted on GD nameservers... It appears they only let you configure TXT spf records, not actual SPF records. Anyone ever come across this before? Cheers, Mike

6 5

Postini / Google admin needed
by Robert Glover 18 Jan '12

18 Jan '12

I apologize for the noise. We are not getting anywhere regarding issues with Postini through the normal support channels. Can someone from Postini please contact me off-list? Sincerely, Bobby Glover Director of Information Services SVI Incorporated

1 0

DNS Track at NANOG 54
by Wessels, Duane 17 Jan '12

17 Jan '12

Greetings, The DNS Track takes place at NANOG 54 on Tuesday from 4:30 to 6:00. This is a very informal (BOF-like) gathering for folks interested in DNS topics. If you have material to present or suggested topics for discussion, I'd welcome your contribution. Duane W.

1 0